3brs/enterprise-security-bundle

Dependency profilecaution

The package declares 34 runtime dependencies for a broad Symfony security bundle, creating a relatively large maintenance and compatibility surface. The scope of the bundle helps explain the size, but the profile remains a moderate caution.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this limits external validation but does not outweigh the active maintenance signals.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a security-focused bundle, that is a meaningful process gap.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency for a package handling authentication and account-security features.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving avoidable action-supply-chain exposure.