contao-id/contao-bundle

Tests, an MIT license, and a security policy make the project easier to maintain and adopt. Pin workflow actions before relying on it in a high-assurance build.

Latest 1.6.10

Packagist

84%

Total Score

Maintainer Stability

100

Maturity

100

Supply Chain

Health Score Breakdown

Workflow audit

The sole workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings, but all 10 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

David Greminger

Jim Schmid

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.1 \|\| ^2.0 \|\| ^3.0	—	—
twig/twig Version ^3.8	—	—
doctrine/dbal Version ^3.7 \|\| ^4.3	—	—
symfony/config Version ^6.4 \|\| ^7.0 \|\| ^8.0	—	—
symfony/routing Version ^6.4 \|\| ^7.0 \|\| ^8.0	—	—