stateforge/scenario-symfony

Repo bus factorcaution

One contributor made all two recent commits, concentrating maintenance responsibility entirely in one person; the repository owner is an individual rather than an organization.

Repo commit activitycaution

Only two commits were recorded in the last three months, which demonstrates some activity but leaves limited evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tool was detected, leaving a maintenance and review gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows use read-only permissions and contain no reported audit findings, but all 13 analyzed action references are unpinned, weakening build reproducibility and update safety.