hugoseigle/symfony-ux-autocomplete-select-all
The package is well documented and has a real, recently active source project. Maintenance rests with one contributor, and all 21 workflow actions are unpinned, leaving meaningful resilience and build-integrity concerns.
70%
Total Score
67
100
94
100
Health Score Breakdown
The repository is owned by a personal account rather than an organization, so the single-contributor concentration is not visibly offset by broader organizational backing.
The package is only 56 days old with two releases, and both releases arrived within a very short interval. This is limited evidence of sustained maintenance rather than abandonment.
One contributor made all six commits in the last three months, so maintenance has a low bus factor and depends heavily on a single person.
All three workflows were analyzed without audit findings or untrusted checkout and script-injection sinks. However, all 21 action references are unpinned and two workflows grant top-level write permissions, creating build-integrity and permission-hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hugo Seigle |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version ^6.4|^7.0|^8.0 | — | — |
symfony/stimulus-bundle Version ^2.13|^3.0 | — | — |
symfony/ux-autocomplete Version ^2.17 | — | — |
symfony/dependency-injection Version ^6.4|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.