tourze/symfony-dependency-service-loader

Release historycaution

The package has only two releases, both within a 14-day period, with no later release observed over roughly nine months. This is a limited maintenance track record.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. For a package this young, that is a meaningful warning about ongoing maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. That is a modest project-hygiene gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for users and maintainers.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers or audit findings, and one scopes permissions read-only. However, all three action references are unpinned, weakening reproducibility and update safety.