sulu/mcp-bundle

Dependency profilecaution

The package has 13 runtime dependencies, including Sulu, Symfony MCP, the MCP SDK, and OAuth components; this is a substantial integration surface that increases upgrade coordination needs.

Release historycaution

The package is only 38 days old with three releases and a median interval of about 11 days, showing active early development but limited maturity history.

Version stabilitycaution

1.0.0-RC3 is still a prerelease, and all recent releases are prereleases, so consumers should expect compatibility changes before a stable release.

Workflow auditcaution

Both workflows were analyzed without detected injection or credential findings and without top-level write permissions. However, all 15 analyzed action references are unpinned, leaving builds exposed to upstream action changes.