nowo-tech/runtime-env-bundle

Dangerous workflowscaution

Seven workflows were analyzed; one uses pull_request_target and another uses an untrusted checkout in a workflow_run context. No script injection was detected, but these patterns increase CI supply-chain exposure and deserve review.

Dependency profilecaution

The bundle declares 21 runtime dependencies, including multiple Symfony, Doctrine, Twig, and UI components. That breadth is plausible for the documented admin bundle, but it increases upgrade and compatibility surface.

Release historycaution

The package is 0 days old with only 2 releases, both published within about 8 hours. This shows initial activity but provides little evidence of long-term maintenance or release stability.

Repo commit activitycaution

The repository reports 0 commits and 0 active maintainers over the last 3 months. Because the package is newly created, this mainly reflects insufficient history rather than proven abandonment, but maintenance capacity remains unestablished.

Repo popularitycaution

The repository has 0 stars, forks, and watchers. For a package released only hours ago this is unsurprising, but it provides no external adoption evidence yet.