crazy-goat/workerman-bundle
Symfony bundle providing a Workerman runtime for high-performance long-running HTTP servers, with built-in task scheduler, process supervisor, PHAR packaging, and event-loop integration.
84%
Total Score
healthy
Frequent releases, strong documentation, and active maintenance outweigh the package's small user base and concentrated commit activity.
Health Score Breakdown
The package runs post-install and post-update Composer scripts, adding execution during dependency operations. No provided signal shows those scripts are unsafe, so this is a limited supply-chain caution rather than a severe finding.
Both workflows were fully analyzed with no audit findings, no untrusted checkouts, and no script-injection findings. One workflow has top-level write permissions and 2 of 12 actions are unpinned, but the minority of unpinned references is acceptable and no untrusted path reaches the broader token.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Anton Zenkov |
| Piotr Halas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
symfony/config Version ^6.4|^7.0|^8.0 | — | — |
symfony/console Version ^6.4|^7.0|^8.0 | — | — |
symfony/runtime Version ^6.4|^7.0|^8.0 | — | — |
symfony/http-kernel Version ^6.4|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.