tilleuls/ckeditor-sonata-media-bundle

Release historycaution

The package has 11 releases over roughly 13 years, but none in the last 12 months; its latest release was nearly three years ago, indicating materially slowed maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long release gap and raising abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating some uncertainty about the linkage; the repository contents and organization backing partly reduce that concern.

Security policycaution

The linked repository has no security policy, leaving reporting and vulnerability-handling expectations undocumented for a package integrated into Symfony applications.

Workflow auditcaution

All five analyzed action references are unpinned, weakening build reproducibility and action supply-chain control. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, and the workflows use no top-level write permissions.