Web Bot Auth key directory for Sylius: publishes an Ed25519 JWKS at /.well-known/http-message-signatures-directory.
64%
Total Score
caution
Thirty-three releases landed today, while all recent commits come from one contributor.
Only one registry maintainer is listed. Because the repository is owned by an individual rather than an organization, there is no provided backing signal to offset that concentration.
The package has 33 releases, all published within one day, so there is no demonstrated release cadence or sustained history yet.
All 26 recent commits came from one contributor, leaving maintenance dependent on a single person despite the recent activity.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/console Version ^7.4 || ^8.0 | — | — |
symfony/routing Version ^7.4 || ^8.0 | — | — |
symfony/http-kernel Version ^7.4 || ^8.0 | — | — |
symfony/http-foundation Version ^7.4 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.