symfony/mercure-bundle
The package has clear documentation, release notes, tests, and a maintained source repository. Workflow dependencies are unpinned, and repository security scanning is not reported, so build hygiene is not perfect.
88%
Total Score
100
88
100
Health Score Breakdown
Composer build tooling is present, but no repository security-scanning tool was detected, leaving a modest transparency and hygiene gap.
Version 0.5.0 is not a prerelease and recent releases contain no prerelease versions, though the pre-1.0 major leaves more room for compatibility changes than a stable-major package.
All three workflows use read-only permissions and the audit found no high- or medium-severity issues, but all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kévin Dunglas |
| Symfony Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lcobucci/jwt Version ^3.4|^4.0|^5.0 | — | — |
symfony/config Version ^6.4|^7.3|^8.0 | — | — |
symfony/mercure Version ^0.8 | — | — |
symfony/web-link Version ^6.4|^7.3|^8.0 | — | — |
symfony/http-kernel Version ^6.4|^7.3|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.