rikudou/unleash-sdk-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned and names unleash/symfony-client-bundle as its replacement. This is a direct maintenance concern for anyone starting a new dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That inactivity is concerning despite the recent release history.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although subpackages can use monorepos, both gaps make package ownership less transparent.

Security policycaution

No security policy was found in the repository. This is a modest transparency gap, though the reported security scanning provides partial compensation.

Workflow auditcaution

All 17 analyzed action references are unpinned, and the audit found a high-confidence medium-severity secrets-inherit issue in a pull_request_target workflow. No untrusted checkout or script injection was found, which limits the impact.