tourze/sensitive-text-detect-bundle

Dependency profilecaution

The bundle declares 21 runtime dependencies, a substantial dependency surface for a small package and a source of additional maintenance exposure, though many are expected Symfony and Doctrine integrations.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. This is a meaningful recent maintenance gap, despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in ongoing supply-chain hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers or audit findings, and one uses read-only permissions. However, all four referenced actions are unpinned, weakening build reproducibility and action-integrity protection.