pjpawel/magis-bundle

Release historydanger

The package has only two releases, with the latest published in December 2022 and none in the last 12 months. This indicates a long period without maintained releases for a Symfony library.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the latest push being in December 2022. No newer activity compensates for this abandonment concern.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is not decisive by itself, but it provides little supporting evidence of active use or community oversight.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, although the package's tests, release notes, and licensed source provide some compensating project evidence.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings, but both action references are unpinned. That leaves a modest build-integrity hygiene gap without evidence of an active exploit path.