dukecity/command-scheduler-bundle

Repo commit activitycaution

There were zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, even though the package has a longer release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning layer modestly reduces transparency and preventive maintenance.

Security policycaution

The repository has no security policy file. For a package that executes scheduled Symfony commands, this leaves vulnerability-reporting and response expectations undocumented.

Workflow auditcaution

All 8 analyzed GitHub Actions references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no dangerous triggers, untrusted checkouts, script injection, or other higher-impact findings, and all three workflows were analyzed successfully.