jgrygierek/sonata-batch-entity-import-bundle

Maintainerscaution

Only one account has registry publishing access, leaving limited publishing redundancy. The individual-owner project context makes this understandable, but it still increases continuity risk.

Release historycaution

The package has existed since May 2020 with 28 releases, but only one release arrived in the last 12 months. The recent v2.8.0 release shows the project is not abandoned, though its current cadence is modest.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Although a release was published recently, the lack of current development activity is a meaningful maintenance concern.

Security policycaution

The linked repository has no security policy. This weakens transparency about vulnerability reporting and response expectations, though it does not by itself show that the package is unsafe.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkouts or script-injection findings, but all 11 action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and update integrity.