somnambulist/policy-bundle
Usable with caveats: this is a young package with only one release and no commits in the last three months. It has organization backing, a matching repository with tests and a changelog, but lacks a security policy and explicit workflow token permissions.
58%
Total Score
75
79
75
Health Score Breakdown
The package is only 95 days old and has one release, so there is little release history to establish maturity or maintenance patterns.
There were no commits and no active maintainers in the last three months. Combined with the package's single-release history, this is a meaningful maintenance concern, though the project is still young.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a severe risk.
No repository security policy was found, leaving vulnerability-reporting and response expectations undocumented.
The only workflow lacks top-level token permissions. No write permissions were detected, but explicitly restricting permissions would provide stronger CI security hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dave Redfern |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 somnambulist/collection Version ^5.5 | — | — |
symfony/security-bundle Version ^7.0|^8.0 | — | — |
symfony/framework-bundle Version ^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.