Symfony bundle to secure atoolo applications
65%
Total Score
caution
Usable with caveats: no repository commits in three months and all analyzed workflow actions are unpinned.
The package has existed for 815 days and published three releases in the last 12 months, including this release, but only four releases overall and a median interval of about 292 days indicate a sparse cadence.
The repository recorded zero commits and zero active maintainers during the past three months. The same-day release provides some compensating evidence, but ongoing maintenance capacity remains uncertain.
The repository name does not match the package name and its README does not mention the package. Although the repository is under an organization, this leaves uncertainty that the linked source is the intended project.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these values provide little independent evidence of broad review or adoption.
The repository has no SECURITY.md or other security policy. For a security-focused Symfony bundle, this is a meaningful transparency and vulnerability-reporting gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.3 || ^7.4.6 | — | — |
symfony/config Version ^6.3 || ^7.4.7 | — | — |
symfony/http-kernel Version ^6.3 || ^7.4.7 | — | — |
symfony/security-core Version ^6.3 || ^7.4.4 | — | — |
atoolo/resource-bundle Version ^1.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.