psalm/plugin-symfony

The package has a clear README, tests, MIT licensing, and organization backing, with dependency and security tooling in place. Recent repository activity is quiet, and the workflows use an unpinned container image, so pinning this version deserves care.

Latest v5.3.0

Packagist

67%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has been published since March 2020 with 73 releases and a median interval of about 14 days, but only two releases arrived in the last 12 months, indicating slower recent maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance activity has recently stalled despite the recent release.

Repo issue activity

The repository has 31 open issues and 13 open pull requests, but it recorded no new or closed issues and no merged pull requests in the last month, which weakens evidence of active maintenance.

Security policy

The repository has no published security policy, leaving vulnerability-reporting and response expectations less transparent.

Workflow audit

Both workflows were analyzed completely and have no untrusted checkout or script-injection findings, but all eight action references are unpinned and the audit found a high-confidence unpinned container image, leaving the build exposed to moving dependencies.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Farhad Safarov

Direct Dependencies

Dependency	Last Release	Score
vimeo/psalm Version ^6 \|\| dev-master	—	—
symfony/framework-bundle Version ^5.0 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/expression-language Version ^5.0 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—