marein/symfony-standard-headers-csrf-bundle

Project backingcaution

The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration is not offset by visible organizational backing.

Release historycaution

The package has only 5 releases over roughly 6 years, with a median interval of about 508 days. A release in the last 3 months is reassuring, but the overall cadence remains slow.

Repo bus factorcaution

All 2 recent commits came from one contributor, giving the project a concentrated maintenance base without organizational backing shown by the provided ownership data.

Repo commit activitycaution

There were 2 commits in the last 3 months, showing recent maintenance, but activity is still limited for a security-related bundle.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.