phpro/symfony-conventions

Release historycaution

The package has existed for about 4 years and has 14 releases, but only one release appeared in the last 12 months, indicating a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release provides some evidence of maintenance, but current activity is limited.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy, which makes reporting and handling vulnerabilities less clear.

Workflow auditcaution

The single workflow was fully analyzed with no detected dangerous findings, but all 3 action references are unpinned, weakening build reproducibility and update control.