boostworld/comment-bundle

Release historycaution

The latest release was June 4, 2024, with no releases in the last 12 months. This is a meaningful abandonment concern for a framework integration package.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. That indicates current maintenance has stalled, although the repository is not archived.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. For a Symfony bundle handling application comments and permissions, this leaves vulnerability-reporting expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, reducing build reproducibility and supply-chain hygiene.