gordalina/mixpanel-bundle
The package includes clear documentation, release notes, tests in the source tree, and a permissive license. Its workflow has all action references unpinned, and the repository lacks security scanning and a security policy.
72%
Total Score
75
100
94
67
Health Score Breakdown
One contributor made all 18 recent commits, leaving maintenance highly dependent on a single person and increasing continuity risk.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-maintenance gap.
The repository has no published security policy, which weakens vulnerability-reporting transparency for a package used in applications.
The workflow is fully analyzed and uses read-only permissions, but all 9 action references are unpinned. Three low-confidence cache-poisoning findings are hygiene concerns rather than standalone severe risks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Samuel Gordalina |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.4 || ^8.0 | — | — |
mixpanel/mixpanel-php Version ~2.8 | — | — |
symfony/security-http Version ^6.4 || ^7.4 || ^8.0 | — | — |
symfony/property-access Version ^6.4 || ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.