Package Health

adspray/short-url-bundle

Risky to adopt for a new project: the last release and repository update were over five years ago, with no recent commits or releases. It still has a license, README, tests, and no deprecation notice, but the linked repository does not name this package, adding uncertainty about ongoing support.

Latest 1.0.3PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Release historydanger

The latest release was over five years ago, and there were no releases in the last 12 months. This is strong evidence of stagnation for a dependency, despite the package having 13 releases overall.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this indicates a substantial abandonment risk.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although the repository is under the matching AdSpray organization, the missing reference creates uncertainty that it is the maintained source for this release.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counters provide no external maintenance or adoption signal alongside the inactive repository.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Marco Bicchi

Direct Dependencies

DependencyLast ReleaseScore
doctrine/orm
Version ^2.5
doctrine/doctrine-bundle
Version ^1.6
symfony/framework-bundle
Version ~3.0|^4.0

Weekly Downloads

Info

Last Published
5 years ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform