sulu/sulu-form-bundle

Registry deprecationdanger

Packagist marks the package abandoned at package scope and names sulu/form-bundle as the replacement, which directly undermines confidence in taking a new dependency on this name.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the linkage is less transparent and may indicate development under another package name.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, or audit findings, but all 7 action references are unpinned, weakening build reproducibility.