Security scanning, a security policy, and a tested repository improve confidence. The workflows have no detected audit findings, but all eight action references are unpinned, so updates should be monitored.
89%
Total Score
100
100
88
All eight workflows were analyzed with no detected findings, and there are no untrusted checkouts or script-injection counts. However, all eight action references are unpinned and one workflow has top-level write permissions, creating a modest reproducibility and token-scope concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/dotenv Version ^7.4 | — | — |
pimcore/pimcore Version ^2026.2.0 | — | — |
symfony/runtime Version ^7.4 | — | — |
pimcore/quill-bundle Version * | — | — |
symfony/amqp-messenger Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.