tourze/user-track-bundle

Dependency profilecaution

The package declares 36 runtime dependencies and 8 development dependencies. That is a broad dependency surface for a Symfony bundle and increases upgrade and transitive-maintenance burden.

Project backingcaution

The registry namespace and repository owner are the same personal account rather than an organization. This does not establish poor backing, but it provides less organizational continuity evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, especially alongside the package's otherwise active release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a hygiene gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is not evidence that the package is insecure.