The package has a clear README, repository tests, and a security policy. Its four workflow actions are unpinned, so automated builds rely on moving external references.
72%
Total Score
75
94
83
This is the package's first release, published 0 days ago, so there is no release history to demonstrate sustained maintenance or compatibility follow-through.
The repository has 0 commits and 0 active maintainers in the last 3 months. Because the release is brand new, this is limited evidence rather than proof of abandonment, but it leaves maintenance capacity untested.
All 4 analyzed workflow action references are unpinned, which permits external action updates to change future builds. The audit found no untrusted checkout, script injection, or higher-severity findings, limiting this to a hygiene caution.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.21 | — | — |
sylius/sylius Version ~2.2.0 || ~2.3.0 | — | — |
symfony/ux-icons Version ^2.36 || ^3.0 | — | — |
symfony/http-kernel Version ^7.4 || ^8.0 | — | — |
symfony/dependency-injection Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.