gember/event-sourcing-symfony-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is a maintenance concern. The recent release and push provide some compensating evidence, so this is caution rather than danger.

Repo popularitycaution

The repository has 1 star, 0 forks, and 1 watcher, indicating little independent adoption or review. Low popularity is supporting evidence only and does not outweigh the active release history.

Security policycaution

The repository has no SECURITY policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no injection sinks or high-severity findings, and it has no top-level write permissions. However, both of its two action references are unpinned, weakening build reproducibility and supply-chain protection.