artack/symfony-ohdear-command

Release historycaution

Four releases over roughly three and a half years, with one release in the last 12 months, indicate a small and infrequent release history rather than strong ongoing momentum.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, which limits evidence of continuing maintenance despite the recent release push.

Repo toolingcaution

The repository uses Composer, but no security scanning tool was detected, leaving a modest gap in ongoing project hygiene.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerability reports are handled.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no detected audit findings; however, both action references are unpinned, weakening build reproducibility and update safety.