nelmio/solarium-bundle

Repo bus factorcaution

All recent commits came from one contributor, creating a meaningful continuity risk; organization backing provides some capacity to hand maintenance off.

Repo commit activitycaution

The repository recorded one commit from one active maintainer over the last 3 months, showing recent activity but a thin maintenance base.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected, so automated vulnerability coverage is limited.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 6 action references are unpinned, weakening build reproducibility.