tourze/symfony-lock-command-bundle

Dependency profilecaution

The package declares 21 runtime dependencies, including several Doctrine and Symfony components, creating a broad update and compatibility surface for a focused command-locking bundle.

Repo commit activitycaution

No commits and no active maintainers were observed in the last three months, which weakens evidence of ongoing maintenance despite the earlier release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, and one workflow uses read-only permissions. However, all four action references are unpinned, which is a workflow supply-chain hygiene gap.