vipinbose/hashids-bundle

Release historydanger

Only two releases were published, both in June 2024, with no release in over two years. That is a meaningful abandonment concern for a package intended to track a changing Symfony ecosystem.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This lowers confidence that defects or compatibility changes will be addressed promptly.

Security policycaution

The repository has no security policy. For a small package this is a transparency gap, though the clean workflow audit and available repository provide some compensating evidence.

Workflow auditcaution

Both workflows were fully analyzed and had no dangerous triggers or audit findings, but all 4 of 4 action references were unpinned. That leaves the build exposed to upstream action changes despite otherwise clean workflow structure.