nutgram/symfony-bundle

Release historycaution

The package has made no registry release in about 17 months despite being established for more than three years. That weakens confidence in ongoing maintenance, although the repository was pushed more recently.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, indicating currently quiet development. This is a meaningful maintenance concern, but does not establish abandonment by itself.

Security policycaution

No repository security policy was found. That reduces transparency for reporting and handling vulnerabilities, though it is a documentation gap rather than evidence of unsafe code.

Workflow auditcaution

The single analyzed workflow was complete and had no untrusted checkout or script-injection findings, but all 7 action references are unpinned and one high-confidence medium-severity finding uses an archived action. This is a supply-chain hygiene concern rather than a standalone severe risk.