silpo-tech/filter-bundle

Dependency profilecaution

The package declares 11 runtime dependencies, including several Symfony components and related silpo-tech bundles. This is a broad integration surface that can increase upgrade coordination, but it is plausible for a Symfony filter bundle.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, despite a release on the assessment date. This is a meaningful maintenance warning because recent release activity is not matched by observed source changes.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than evidence that the release is unsafe.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency for a dependency, though it is not by itself evidence of abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no trigger, sink, or audit findings, and its jobs scope permissions. However, all 10 action references are unpinned, leaving build inputs less reproducible and dependent on moving external references.