The organization-backed repository is active, with tests, release notes, and a clear README. Maintenance is concentrated in one contributor, while all six workflow actions are unpinned and no security policy or scanning is present.
68%
Total Score
75
100
78
67
The package has existed since November 2021 and has a latest release in July 2026, but only one release occurred in the last 12 months, indicating a modest cadence.
One contributor made all five recent commits, creating a genuine continuity risk; organization backing provides some ability to hand maintenance off.
Five commits were made in the last three months, so development has not stopped, though the volume is limited.
The repository has zero stars and forks, with four watchers. This is weak supporting evidence, but popularity alone does not determine health.
The repository uses Make and Composer, indicating build structure, but it has no detected security-scanning tools.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/validator Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/serializer Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/http-client Version ^6.4 || ^7.4 || ^8.0 | — | — |
doctrine/collections Version ^2.1 | — | — |
symfony/framework-bundle Version ^6.4 || ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.