sonata-project/media-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful recent maintenance warning despite the package's longer release history.

Repo issue activitycaution

There were no new or closed issues or merged pull requests in the last month, although seven pull requests remain open. Combined with zero recent commits, this suggests currently quiet project activity.

Repo toolingcaution

The repository uses Composer and Make for builds, but no security-scanning tools were detected. The missing scanning is a hygiene weakness, not evidence of abandonment by itself.

Security policycaution

No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, though it does not by itself make the release unfit.

Workflow auditcaution

All 33 action references are unpinned, and two high-confidence findings identify unpinned container images; one workflow also has top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection sink, so it is not independently dangerous.