b2pweb/bdf-form
The package has clear documentation, tests, licensing, and a small dependency set. Organization backing and recent commits help, though maintenance remains concentrated in one contributor and no security policy is published.
72%
Total Score
83
100
100
75
Health Score Breakdown
All four recent commits came from one contributor, leaving maintenance capacity concentrated despite the organization-owned repository.
The repository has no published security policy, leaving vulnerability reporting and response expectations less transparent.
The workflow audit completed cleanly with no untrusted checkout, injection, or high-confidence findings, but all 13 analyzed action references are unpinned, weakening build reproducibility and action supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vincent Quatrevieux |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/validator Version ~4.3|~5.0|~6.0|~7.0 | — | — |
symfony/polyfill-php80 Version ~1.22 | — | — |
symfony/property-access Version ~4.3|~5.0|~6.0|~7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.