gponty/symfony-idloom-api-bundle

Maintainerscaution

One registry maintainer is consistent with a small, individually owned project, but it provides little redundancy if that maintainer becomes unavailable.

Release historycaution

The package has six releases since June 2023 and one release in the last 12 months, including the latest release on January 22, 2026. This shows ongoing publishing but a sparse cadence.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which weakens evidence of continuing maintenance despite the recent release.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although the package's small scope limits its weight.

Workflow auditcaution

All four analyzed action references are unpinned, reducing build reproducibility and supply-chain control. The workflows do use read-only permissions and have no untrusted checkout, injection, or other audited findings, so this remains a hygiene concern rather than a severe risk.