corponat/api-doc-bundle
The repository includes tests, a recognized MIT license, security guidance, and dependency scanning. The release is over three years old with no recent commits, while workflows use entirely unpinned references and an unpinned container image. Pinning this version carries meaningful maintenance risk.
44%
Total Score
50
83
75
Health Score Breakdown
The package has had no release in over three years: all seven releases arrived around the initial publication, with none in the last 12 months. This is strong evidence of stalled release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the lack of recent package maintenance.
All eight analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in the documentation workflow. The workflows have no untrusted checkout or script-injection findings, but the reproducibility and supply-chain hygiene gap remains material.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nelmio |
| Symfony Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0|^2.0|^3.0 | — | — |
psr/cache Version ^1.0|^2.0|^3.0 | — | — |
psr/container Version ^1.0|^2.0 | — | — |
symfony/config Version ^4.4|^5.0|^6.0 | — | — |
symfony/console Version ^4.4|^5.0|^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.