tourze/json-rpc-lock-bundle

Dependency profilecaution

Sixteen runtime dependencies create a relatively broad dependency surface for a Symfony bundle, which increases update and compatibility burden.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months, indicating that maintenance activity has recently stalled despite the earlier release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and monitoring gap.

Security policycaution

The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.

Workflow auditcaution

Both workflows were analyzed with no audit findings or untrusted triggers, but all four action references are unpinned, leaving them exposed to upstream action changes.