james-and-james-fulfilment/symfony1

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the registry still shows five releases in the last year.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are configured, leaving a repository hygiene gap for a framework package.

Security policycaution

The repository has no security policy, making vulnerability reporting and coordinated disclosure less transparent.

Workflow auditcaution

Both workflows were analyzed completely with no audit findings, no untrusted checkout or script-injection paths, and no broad top-level write permissions. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.