grobolof/bot-payload

This is a well-scaffolded, licensed PHP package with a matching repository, tests, CI/release workflows, no install-time scripts, no deprecation, and a stable 2.0 release. However, it is very young with only two releases over about 172 days, shows no commits or active maintainers in the last 3 months, has no security policy or automated security scanning, and one workflow grants top-level write permissions. It is usable as a dependency, but the limited maintenance history and repository security-hygiene gaps warrant caution and continued monitoring.

Latest 2.0Packagist

Vulnerabilities

We didn't find any vulnerabilities for this package.

Direct Dependencies

Dependency	Last Release	Score
symfony/serializer Version ^6.4 || ^7.4 || ^8.0	—	—
symfony/property-info Version ^6.4 || ^7.4 || ^8.0	—	—
symfony/property-access Version ^6.4 || ^7.4 || ^8.0	—	—