migrify/config-transformer
The source repository is active, has tests, a matching README, and clear MIT licensing. However, recent commit activity is absent, and every audited workflow uses unpinned actions without a security policy, increasing maintenance and build-integrity concerns.
38%
Total Score
75
79
67
Health Score Breakdown
Packagist marks the entire package as abandoned and names symplify/config-transformer as its replacement. This is a serious adoption risk despite the current release and repository still being present.
The project has a long history with 383 releases, but only 2 releases in the last 12 months, indicating a sharp slowdown in delivery.
The repository recorded no commits and no active maintainers during the last 3 months. This weakens the evidence of ongoing maintenance, even though a recent release exists.
The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented.
All 3 workflows were analyzed with no untrusted checkout, script injection, or auditor findings, and none grants top-level write access. However, all 8 action references are unpinned, which is a build-integrity hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/utils Version ^4.0 | — | — |
symfony/yaml Version ^6.4 | — | — |
symfony/config Version ^6.4 | — | — |
symfony/finder Version ^6.4 | — | — |
symfony/console Version ^6.4 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.