spiriitlabs/form-filter-bundle
This is a healthy, mature release with a long history, 75 releases since 2012, a current stable major version, recent publishing activity, an active non-archived organization-owned repository, and clear package/repository identity. The repository includes tests, changelog files, CI and dependency-update tooling, while the artifact has an MIT license, README, and no install-time lifecycle scripts. The main concerns are that all three commits in the last three months came from one contributor, the repository lacks a security policy, and most workflows do not declare top-level permissions, including one workflow with write permissions; these are meaningful hygiene and continuity cautions but do not outweigh the strong maintenance and transparency evidence.
82%
Total Score
80
100
100
80
Health Score Breakdown
One contributor made all three commits in the last three months, creating a concentrated recent commit bus factor. Organization backing partially mitigates handoff risk but does not remove the observed concentration.
Three commits were made in the last three months, so activity has not stopped, but the low volume is a mild maintenance concern when combined with single-contributor activity.
No repository security policy was found, leaving vulnerability-reporting expectations and response guidance undocumented.
Three of four workflows lack top-level permissions declarations, and the documentation workflow has top-level write permissions; explicit least-privilege controls are therefore incomplete.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^3.0 | — | — |
symfony/form Version ^5.4|^6.4|^7.4|^8.0 | — | — |
symfony/routing Version ^5.4|^6.4|^7.4|^8.0 | — | — |
symfony/http-foundation Version ^5.4|^6.4|^7.4|^8.0 | — | — |
symfony/framework-bundle Version ^5.4|^6.4|^7.4|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.