Strong tests, release notes, and clear documentation improve confidence in the implementation. The project is new, maintained by one person, lacks a security policy, and uses two unpinned workflow actions.
68%
Total Score
50
100
78
75
One registry publishing account is consistent with the linked repository being user-owned, but it also indicates a thin publishing base and limited apparent redundancy.
The package and repository are both owned by the same individual account rather than an organization. This is coherent ownership, but it offers less visible backing and redundancy than an established organization-owned project.
This is a 159-day-old package with only one release and no established release cadence. The limited history makes long-term maintenance less certain.
There are 13 open issues and two open pull requests, but no issues or pull requests were created or merged in the last month. With only one release, the lack of recent activity modestly raises maintenance uncertainty.
The repository has zero stars, zero watchers, and one fork. This is limited supporting evidence and is consistent with a new package, but it provides little external validation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^7.4 || ^8.0 | — | — |
doctrine/dbal Version ^3.8 || ^4.0 | — | — |
symfony/console Version ^7.4 || ^8.0 | — | — |
symfony/messenger Version ^7.4 || ^8.0 | — | — |
symfony/scheduler Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.