data-dog/audit-bundle

Dependency profilecaution

Seven runtime dependencies, including Doctrine and Symfony components, create a meaningful compatibility surface for this framework bundle. The profile is plausible for the package's stated function but warrants normal dependency review.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release and push are recent, the lack of recent development activity is a real maintenance concern.

Repo toolingcaution

The repository uses Composer build tooling but has no detected security-scanning tooling. Build support is present, while security-process visibility is limited.

Security policycaution

No repository security policy was found. For a bundle that records database changes and may handle user-linked audit data, this is a transparency gap.

Token permissionscaution

The single workflow has no top-level token permissions declaration. No write permissions were detected, which limits the concern, but explicit least-privilege configuration would provide stronger assurance.