nelmio/security-bundle

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the package had a release during the observed period.

Repo issue activitycaution

There was some recent activity—one new issue and two new pull requests in the last month—but no issues or pull requests were closed or merged, which provides limited evidence of responsiveness.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found. For a security-focused bundle, this reduces transparency around vulnerability reporting and response.

Workflow auditcaution

All four workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 11 action references are unpinned, leaving workflow dependencies exposed to upstream changes.