Healthy and usable, with a concentrated maintenance risk. The package has frequent stable releases, recent commits, tests, changelog documentation, and an unarchived matching repository, but all recent commits come from one contributor and the repository has no security policy or scanning tools.
76%
Total Score
63
50
94
83
The framework core declares 13 runtime dependencies spanning routing, HTTP, mail, database, console, validation, and configuration functionality. This breadth is expected for a framework core but increases the maintenance surface compared with a narrowly scoped library.
The repository is owned by an individual rather than an organization, so the concentrated contributor activity is not offset by an evident organizational maintenance structure.
One contributor made all 34 commits in the last three months, giving the project a bus factor of one. The individual-owned repository provides no organizational handoff compensation, so this is a meaningful continuity risk.
The repository recorded 34 commits in the last three months, showing strong recent activity. However, this activity is concentrated in one maintainer, which reduces resilience if that person becomes unavailable.
Composer build tooling is present, but no security scanning tools were detected. The missing automated security checks reduce transparency around dependency and build hygiene, without establishing that the release is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.7 | — | — |
symfony/mime Version ^7.4 | — | — |
doctrine/dbal Version ^4.4 | — | — |
predis/predis Version ^3.5 | — | — |
symfony/mailer Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.