The repository still has build and security tooling, and the package includes tests and documentation. Prefer the listed replacement, araise/crud-bundle, rather than adopting this abandoned release.
38%
Total Score
67
67
50
Packagist marks the package abandoned at package scope and names araise/crud-bundle as its replacement. This is a strong adoption risk even though the repository remains available.
The package has had 34 releases since January 2017, but none in the last 12 months and its latest release was in March 2023. That release gap materially raises abandonment risk.
All 2 recent commits came from one contributor, so current maintenance depends on a single active person. Organization backing provides some handoff capacity, but no second recent contributor is shown.
The repository recorded 2 commits in the last 3 months, showing some recent activity despite the stale registry release. The activity is too limited to offset the package-level abandonment status.
The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap for a framework bundle.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/form Version ~4.0|~5.0 | — | — |
phpspec/prophecy Version ~1.0 | — | — |
symfony/serializer Version ~4.0|~5.0 | — | — |
symfony/http-kernel Version ~4.0|~5.0 | — | — |
symfony/twig-bundle Version ~4.0|~5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.