2lenet/crudit-bundle

Dependency profilecaution

The bundle declares 31 runtime dependencies, including database, Symfony, document generation, spreadsheet, and editor components. This is a substantial dependency surface and raises update and compatibility overhead, though it fits the bundle's broad functionality.

Repo bus factorcaution

One contributor made 17 of 19 commits in the last 3 months, or about 89%, while two others made one each. The organization backing provides some handoff capacity, but current activity remains highly concentrated.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. The missing automated security checks reduce transparency around dependency and code risks.

Security policycaution

No security policy was found in the repository. This is a transparency gap for reporting vulnerabilities, although it does not by itself indicate abandonment.

Token permissionscaution

All 3 workflows lack top-level token permission declarations, even though none declares top-level write access. Explicit least-privilege settings would provide stronger CI hygiene.