corponat/maker-bundle
The repository has had no commits in the last three months, and its workflows leave all 21 action references unpinned, including a high-confidence unpinned container image. Tests and an MIT license are present, but they do not offset the maintenance and build-hygiene concerns.
45%
Total Score
50
83
75
Health Score Breakdown
The latest registry release was in December 2022, with no releases in the last 12 months. That is a substantial maintenance concern for a package intended to support an active framework ecosystem.
The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in June 2025, the current lack of development activity raises abandonment risk.
The repository has no security policy. This is a transparency gap, though it is less significant than the stale release activity and workflow pinning issues.
All 21 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in the Linux workflow. The workflows have no untrusted checkout or injection trigger, which limits the concern to build hygiene rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Symfony Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^5.4.7|^6.0 | — | — |
symfony/finder Version ^5.4.3|^6.0 | — | — |
symfony/console Version ^5.4.7|^6.0 | — | — |
nikic/php-parser Version ^4.11 | — | — |
doctrine/inflector Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.