Package Health/nyholm/symfony-bundle-test

nyholm/symfony-bundle-test

Tests, release notes, licensing, and Psalm checks provide useful project transparency. The repository remains active and unarchived, but the recent maintenance pause and weak workflow pinning warrant checking compatibility before adoption.

Latest 3.1.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 21 releases over roughly 9 years, but no releases in the last 12 months; this indicates a meaningful maintenance slowdown despite a historically regular median interval of about 43 days.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign of paused maintenance and a risk for compatibility updates.

Security policy

No repository security policy was found, leaving vulnerability-reporting expectations undocumented; this is a transparency gap, though not evidence of unsafe code.

Workflow audit

Both workflows were fully analyzed with no injection findings or write-scoped top-level tokens, but all 13 referenced actions are unpinned, leaving build inputs less reproducible and increasing workflow supply-chain exposure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tobias Nyholm

Direct Dependencies

Dependency	Last Release	Score
symfony/yaml Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/filesystem Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/http-kernel Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/framework-bundle Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/dependency-injection Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—