boshurik/symfony-constraints
The linked repository does not identify this package in its name or README, and all three workflow actions are unpinned. It includes tests and a usable README, but releases are infrequent and recent commit activity is absent.
35%
Total Score
50
71
75
Health Score Breakdown
Packagist marks the entire package as abandoned and names boshurik/ru-constraints as its replacement, making this release a poor dependency target despite the available 3.0.0 release.
The package has nine releases over about seven and a half years, with a median interval of about nine months and only one release in the last year; this indicates limited maintenance momentum.
The repository had zero commits and zero active maintainers in the last three months. The recent release and push provide some evidence of current activity, but not sustained maintenance.
The linked repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is less transparent than expected.
The single workflow was fully analyzed with no dangerous findings, but all three action references are unpinned, leaving build inputs less reproducible and harder to control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 BoShurik |
| Ilya Kholenkov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/validator Version ^7.0|^8.0 | — | — |
symfony/property-access Version ^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.