Symfony bundle for ClickTrail attribution: config tree, request capture subscriber, consent resolver gate, Messenger delivery, Twig helpers, diagnostics command, webhook signature verification.
67%
Total Score
83
88
75
The package is only 26 days old and has two releases, so its maintenance record is still too short to demonstrate long-term stability.
All nine recent commits came from one contributor, leaving no demonstrated handoff capacity; organization ownership helps, but no second active contributor is shown.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Version v0.1.1 is a non-stable-major release, which signals an early API and maintenance stage despite not being marked prerelease.
The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all four action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
twig/twig Version ^3.0 | — | — |
symfony/clock Version ^6.4|^7.0 | — | — |
symfony/messenger Version ^6.4|^7.0 | — | — |
clicktrail/php-sdk Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.