tourze/symfony-aop-async-bundle

Dependency profilecaution

The bundle declares 13 runtime dependencies, including several Symfony and related Tourze components. This is a relatively broad dependency surface for a bundle and modestly increases maintenance coupling.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of external adoption reduces independent confidence in project maturity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling is reported. This is a transparency and maintenance-control gap, not evidence that the release is unsafe by itself.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although the package's tests, license, and active release history provide some compensating project evidence.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 4 of 4 action references are unpinned, leaving build inputs less reproducible and increasing update risk.