fp/jsformvalidator-bundle
Clear documentation, tests, and licensing support long-term use. The main drawback is workflow hygiene: all 13 action references are unpinned and the workflow grants top-level write access, so automation changes deserve extra care.
86%
Total Score
100
94
75
Health Score Breakdown
The repository uses Composer build tooling, but no security-scanning tool was detected. That is a modest transparency and maintenance gap, partly offset by the repository's tests and static-analysis evidence in its published release notes.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented. This lowers transparency modestly but is not, by itself, evidence of abandonment.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all 13 action references are unpinned and the workflow has top-level write permissions, creating avoidable CI supply-chain and permission exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ton Sharp |
| Yury Maltsev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.0 | — | — |
symfony/form Version ^8.0 | — | — |
symfony/config Version ^8.0 | — | — |
symfony/routing Version ^8.0 | — | — |
symfony/validator Version ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.