innmind/black-box-symfony

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite the recent release.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, leaving little evidence of active issue handling; two open issues remain.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users are not given a documented channel or process for reporting vulnerabilities.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts or script injection, but the release workflow has a high-confidence secrets-inherit finding and all three action references are unpinned. These are workflow hygiene and credential-scope concerns, not evidence that the package is unsafe by themselves.