nowo-tech/http-hardening-bundle
Symfony bundle for public HTTP hardening: security headers (nosniff, HSTS, Permissions-Policy, CORP), nonce-based Content-Security-Policy, public Cache-Control, www-to-apex redirect, safe internal redirects and optional anonymous session-cookie strip for CDN-friendly public GET pages.
68%
Total Score
caution
The project is only six days old, and its workflows have a high-confidence injection risk.
Health Score Breakdown
The package is only 6 days old, despite 10 releases in that period; this shows activity but leaves little evidence of long-term maintenance or stability.
All 6 workflows were analyzed, but all 13 action references are unpinned. More importantly, coderabbit.yml combines workflow_run, an untrusted checkout, and a high-confidence template-injection finding, creating a meaningful workflow supply-chain concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Héctor Franco Aceituno |
| Nowo.tech |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/http-kernel Version ^7.4 || ^8.0 | — | — |
symfony/security-core Version ^7.4 || ^8.0 | — | — |
symfony/http-foundation Version ^7.4 || ^8.0 | — | — |
symfony/dependency-injection Version ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 15 hours ago
- Created
- 7 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.