boson-php/symfony-http-bridge
The repository is small but organized, with tests, a README, and matching ownership. No commits in three months, no security policy, and four unpinned actions weaken confidence; the 0.x version also signals limited stability.
61%
Total Score
75
83
75
Health Score Breakdown
The package has 19 releases and 9 releases in the last 12 months, but the latest release was about 9 months ago, leaving some uncertainty about current maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful sign of slowed maintenance.
The repository has no security policy, reducing transparency about how vulnerability reports are handled.
Version 0.19.5 is not a stable-major release, so its 0.x status implies a higher chance of compatibility changes despite no recent prereleases.
The only workflow was fully analyzed with no dangerous findings, but all 4 action references are unpinned, leaving build inputs less reproducible and more exposed to upstream changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kirill Nesmeyanov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 boson-php/http Version ^0.19 | — | — |
boson-php/http-bridge Version ^0.19 | — | — |
symfony/http-foundation Version ^6.4|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.