rector/rector-symfony

Release historycaution

The package has 70 releases since March 2021, but none in the last 12 months and its latest registry release was in June 2024. Recent repository activity partly offsets the stale registry cadence, but version freshness remains a caution.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented. This is a transparency gap, though it is not evidence of unsafe code.

Workflow auditcaution

All five workflows were analyzed without audit failures or untrusted checkouts, and the pull_request_target trigger has no detected sink. However, all 12 action references are unpinned, weakening build reproducibility and update safety.