tourze/async-service-call-bundle

Dependency profilecaution

The bundle declares 20 runtime dependencies, including several Symfony and Doctrine components, creating a relatively broad dependency surface for consumers.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a modest supply-chain hygiene gap.

Security policycaution

The repository has no security policy, which leaves vulnerability-reporting expectations and handling less transparent.

Workflow auditcaution

Both workflows were analyzed successfully and use read-only permissions, with no detected injection or dangerous-trigger findings. However, all five action references are unpinned, weakening build reproducibility and update control.