The interface of symfony-shop: a shop, its cart, the purchase tunnel, the buyer's orders and their administration
66%
Total Score
caution
Only one day of history and one active contributor make long-term maintenance unproven despite organization backing.
The package declares 16 runtime dependencies, creating a broad dependency chain for this shop interface. The dependencies are clearly listed, but the breadth increases integration and maintenance exposure.
The package is only 1 day old, with 5 releases and a median interval of about 2 hours 24 minutes. This shows active initial publishing but provides almost no evidence of sustained maintenance.
One contributor made all 2 recent commits. The repository is organization-owned, which provides some handoff capacity, but no second active contributor is evidenced yet.
There were 2 commits from 1 active maintainer in the last 3 months, all within a package that is only 1 day old. This is consistent with a new project but does not yet demonstrate sustained activity.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of an unsafe release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
wexample/symfony-api Version >=13.0.0 | — | — |
wexample/symfony-geo Version >=6.0.0 | — | — |
wexample/symfony-mail Version >=2.0.0 | — | — |
wexample/symfony-shop Version >=4.0.0 | — | — |
wexample/symfony-user Version >=12.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.