sindla/aurora
A substantial README, tests, and release notes make integration and change tracking easier. MIT licensing and a non-deprecated release are also clear positives, while workflow and security-policy gaps merit care.
72%
Total Score
75
93
50
Health Score Breakdown
One contributor made all 7 recent commits, leaving maintenance highly concentrated and increasing continuity risk if that contributor becomes unavailable.
Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency and maintenance gap rather than evidence of an unmaintained project.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations unspecified for a package with many runtime dependencies.
Both workflows were analyzed without audit findings or untrusted-code sinks, but all 4 action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and workflow-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sindla XYZ S.R.L. |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.25 | — | — |
brick/math Version ^0.17 | — | — |
symfony/uid Version ^8.1 | — | — |
doctrine/orm Version ^3.6 | — | — |
symfony/yaml Version ^8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.