sonata-project/exporter

The project has a long release history, clear organizational backing, and a documented release for this version. Recent repository activity is quiet, while all analyzed workflow references are unpinned and two workflows use unpinned container images.

Latest 3.4.0

Packagist

70%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although a recent release and push provide some compensating evidence, current development activity is quiet.

Repo issue activity

There were no new or closed issues or pull requests in the last month, despite three open issues and two open pull requests. This is a modest sign of limited current responsiveness.

Repo tooling

The project uses Composer and Make, but no security scanning tool was detected. This is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and response. Organizational backing and ongoing releases partly compensate but do not remove the gap.

Workflow audit

All 21 analyzed action references are unpinned, and two workflows have high-confidence unpinned-container findings. The pull_request_target trigger has no untrusted checkout or script-injection sink, but the workflow supply chain still has avoidable maintenance risk.