vulqen/symfony-bundle

Release historycaution

The package is only 2 days old but already has 6 releases, showing active initial development; the short history still limits maturity evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected; the missing scanner is a modest transparency gap for a package intended to run inside applications.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for a package that instruments application requests and database activity.

Version stabilitycaution

v0.4.0 is not a prerelease, but the package has not reached a stable major version and has only a 2-day history.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its 2 action references are unpinned, weakening build reproducibility and supply-chain hygiene.