Package Health

algolia/search-bundle

Documentation and release notes are thorough, with tests, changelog history, and an explicit migration guide. Recent repository activity is absent, while all five workflow actions are unpinned and one workflow installs an unlocked package.

Latest 8.1.0PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release and organization ownership partly offset this, but the missing current development activity is a maintenance concern.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, despite 18 open issues and 8 open pull requests. Together with zero recent commits, this suggests temporarily limited visible maintenance.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is moderated by the presence of automated security scanning.

Workflow auditcaution

All five analyzed action references are unpinned, and a high-confidence finding shows a cleanup workflow installing a package outside a lockfile. No untrusted checkout, script injection, or write-wide token issue was found, so this is workflow hygiene caution rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Algolia

Direct Dependencies

DependencyLast ReleaseScore
symfony/filesystem
Version ^7.0 || ^8.0
—
—
symfony/serializer
Version ^7.0 || ^8.0
—
—
doctrine/persistence
Version ^2.1 || ^3.0 || ^4.0
—
—
doctrine/event-manager
Version ^1.1 || ^2.0
—
—
symfony/property-access
Version ^7.0 || ^8.0
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
11 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform