solido/symfony-template

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, which add execution during dependency operations and therefore modest supply-chain exposure. No other provided signal shows those scripts are unsafe.

Release historycaution

The package has only 4 releases since March 2021 and none in the last 12 months; the latest release was about 20 months ago. This indicates a slow release cadence, though it does not by itself prove abandonment.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, weakening evidence of active maintenance. The recent repository push provides some counterevidence but does not establish ongoing development.

Security policycaution

The repository has no security policy, leaving disclosure and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.

Version stabilitycaution

Version 0.4.0 is not a stable major release, so its API and behavior may still change before 1.0. It is not marked as a prerelease, which partly reduces the concern.