agg/theme-bundle-modern

Release historydanger

There has been only one release, published over eight years ago, with no releases in the last 12 months. That strongly suggests abandonment for a dependency intended for ongoing use.

Repo package mentiondanger

The repository name does not match the package name and its README does not mention the package. That raises a provenance concern because the repository may not actually belong to this package.

Package file treecaution

The artifact contains only README.md and composer.json, providing very little visible package content for a Symfony bundle and limited transparency into what consumers receive.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external sign of adoption or community support.

Repo toolingcaution

Composer is used as a build tool, which is appropriate, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.