tourze/condition-system-bundle

Dependency profilecaution

The package declares 23 runtime dependencies, including framework, ORM, administration, and several project-specific bundles, creating a relatively broad maintenance and compatibility surface. The dependency set fits the bundle's stated functionality but still increases upkeep risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which raises maintenance and abandonment concerns for a young package. The recent release history provides some compensating evidence, but does not show ongoing development.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response. This is a meaningful gap for a Symfony bundle with 23 runtime dependencies.

Version stabilitycaution

Version 0.1.1 is not a prerelease, but the 0 major version indicates an early-stage API with potentially limited maturity. The package's tests, README, and release notes provide some compensating evidence.

Workflow auditcaution

All 4 analyzed action references are unpinned, weakening build reproducibility and increasing exposure to changed upstream actions. The audit found no injection sinks, dangerous triggers, or high-severity findings, which keeps this as a hygiene concern rather than a severe risk.