netgen/ibexa-forms-bundle
The package includes tests, documentation, a clear license, and organization backing, with no deprecation or archive status. Its sparse release history, absent security policy, and unpinned workflow image reduce confidence in long-term maintenance and build hygiene.
65%
Total Score
75
100
88
67
Health Score Breakdown
The package has existed for about 4 years and 6 months, but only 4 releases with a median interval of about 329 days indicate a deliberately slow cadence rather than frequent maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning even though the release itself was published during that period.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response expectations.
Both workflows were analyzed successfully and have no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all three action uses are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Netgen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ibexa/core Version ^5.0 | — | — |
symfony/form Version ^7.3 | — | — |
symfony/config Version ^7.3 | — | — |
symfony/validator Version ^7.3 | — | — |
symfony/http-kernel Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.