flavacaster/symfony-http-bundle

Release historydanger

The latest release was in December 2022, and there were no releases in the following 12 months covered by the scan. A history of 20 releases shows prior activity, but the long stop is a significant abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the multi-year release gap. The repository is not archived, but there is no recent work to offset the inactivity.

Dependency profilecaution

The bundle declares 11 runtime dependencies, including several Symfony, serializer, and validation components. That is a meaningful dependency surface for an inactive package and can increase compatibility upkeep, although no dependency is shown to be unsafe.

Repo popularitycaution

The repository has zero stars, forks, and watchers, so there is no evidence of a wider user or contributor community to help sustain it. Popularity is only supporting evidence, but it reinforces the maintenance concern here.

Repo toolingcaution

The project uses Composer, showing basic build tooling, but no security-scanning tools were detected. The tooling is adequate for packaging but provides little evidence of ongoing security hygiene.