phpstreamserver/symfony

Dangerous workflowscaution

The repository has one pull_request_target workflow, which can execute with elevated repository context and warrants careful review even though no untrusted checkout or script injection was detected.

Dependency profilecaution

The release declares 13 runtime dependencies, including PHP extensions and several framework components. This is a substantial integration surface that increases upgrade and compatibility exposure, though it is plausible for a Symfony server bundle.

Package scaffoldingcaution

A README is present and GitHub Releases are used, but neither the artifact nor repository contains tests or a changelog. For a framework integration, the lack of visible tests is a meaningful maintenance and regression-transparency gap.

Repo bus factorcaution

One contributor made all 18 commits in the last three months, giving a 100% top-contributor share. Organization ownership provides some handoff potential, but no second active contributor is shown, leaving a real continuity risk.

Repo issue activitycaution

There were no new or merged pull requests and no new or closed issues in the last month; this is weak evidence about community responsiveness, but the null open-issues count prevents a stronger conclusion.