2lenet/file-bundle

Documentation and repository tests are present, and the package has a clear MIT license. Its lack of releases and commits for roughly two years, combined with fully unpinned workflow actions, raises maintenance and build-reproducibility concerns.

Latest 1.0.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had no release in roughly two years and no releases in the last 12 months, despite four releases overall. This is a meaningful maintenance concern for a dependency, though the stable 1.0.3 version remains available.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the broader lack of releases and indicating a real risk of stalled maintenance.

Repo popularity

The repository has only 2 stars, 1 fork, and no watchers. Popularity is supporting evidence rather than a verdict, but these low adoption signals provide little evidence of a broad maintenance community.

Repo tooling

The repository uses Composer and Make, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence that the package is unfit.

Security policy

No security policy is present in the repository, leaving vulnerability reporting and response expectations unclear.