symfony/symfony-demo
It includes tests, a clear MIT license, security policy, and Composer audit scanning. Install scripts and unpinned workflow actions merit routine review, but active organizational backing limits the maintenance concern.
87%
Total Score
100
100
75
Health Score Breakdown
The package runs post-install-cmd and post-update-cmd scripts, which add execution-time supply-chain exposure during dependency operations. No provided signal shows these scripts are unsafe, so this is a review concern rather than a severe health risk.
All 3 workflows were analyzed successfully, use read-only permissions, and contain no dangerous triggers or audit findings. However, all 11 referenced actions are unpinned, leaving workflow dependencies exposed to moving references.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^3.5 | — | — |
symfony/flex Version ^2 | — | — |
symfony/form Version ^8 | — | — |
symfony/intl Version ^8 | — | — |
symfony/yaml Version ^8 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.