sonata-project/translation-bundle

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. A recent release and push provide some continuity, but the current maintenance signal is weak.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tools were detected, leaving a repository hygiene gap.

Security policycaution

No security policy was found in the repository, reducing transparency about how vulnerabilities should be reported.

Workflow auditcaution

All 33 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image in documentation workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene risk rather than a severe standalone issue.