wexample/symfony-search

Dependency profilecaution

The release declares 14 runtime dependencies and no development dependencies, creating a relatively broad dependency surface for a newly released package. This increases integration and maintenance exposure, although the signal alone does not show that the dependencies are unsafe.

Release historycaution

The package is only 1 day old, with four releases in that time. This shows active initial publishing but provides too little history to establish dependable maintenance or release practices.

Repo commit activitycaution

There are no commits recorded in the previous 3 months, but the project itself is only 1 day old and was pushed recently. This is insufficient history rather than evidence that established maintenance has collapsed.

Repo toolingcaution

The repository uses Composer, providing basic build/package tooling, but no security-scanning tool was detected. That is a modest transparency and maintenance gap for a package with multiple runtime dependencies.

Security policycaution

No repository security policy was found. This is a transparency gap, though it is less concerning because the project is new and no other provided signal indicates an active security incident.