Risky to adopt: the repository appears to contain no concrete package implementation despite 117 releases, and all recent commits come from one contributor. The organization backing and active release activity help, but the release's actual contents and long-term maintainability remain serious concerns.
42%
Total Score
83
81
50
The 35-file tree contains project documentation and configuration but no apparent PHP source directory or implementation files, which is a serious transparency and usability concern for a Symfony cart library.
A README is present, but it explicitly says the repository provides no concrete code to document; missing tests and a changelog are normal for published artifacts and are not concerns by themselves.
All 14 recent commits came from one contributor, creating a meaningful continuity risk; organization backing provides some ability to transfer maintenance but no second active contributor is shown.
The repository has no stars or forks and only one watcher, providing little independent evidence of adoption or review. Popularity is supporting evidence, so this lowers confidence more than it determines the verdict.
No security policy was found, leaving vulnerability-reporting expectations unclear; the absence of workflows means this is a transparency gap rather than evidence of unsafe automation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wexample/symfony-money Version >=4.0.0 | — | — |
wexample/symfony-helpers Version >=8.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.