It has a clear MIT license, tests, and release notes for v5.0. The repository is not archived and the package has no install-time scripts.
62%
Total Score
50
50
88
75
The release declares 27 runtime dependencies, including broad Symfony, Doctrine, Twig, and bundle integrations; this creates meaningful upgrade and compatibility surface.
Only one registry account has publish access. The matching repository owner provides some continuity, but the publishing base remains concentrated.
The repository is owned by an individual rather than an organization, so the concentrated maintainer and contributor activity is not offset by visible organizational backing.
The package has 15 releases over roughly 10 years, but none in the last 12 months and the latest registry release was about 2 years ago, raising maintenance concerns.
One contributor made all recent commits, giving the project a bus factor of one and increasing dependence on a single maintainer.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.0|^3.0 | — | — |
doctrine/orm Version ^2.8 | — | — |
symfony/form Version >=5.0|>=6.2 | — | — |
symfony/mime Version >=5.0|>=6.2 | — | — |
symfony/asset Version >=5.0|>=6.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.