alpixel/assetversionbundle
Its MIT license, README, and small dependency surface make inspection straightforward. However, the project has seen no registry release or repository commit activity since 2017, and it has no security policy. Pinning this version carries substantial abandonment risk.
42%
Total Score
50
100
71
83
Health Score Breakdown
The package has only two releases, with the latest in August 2016 and none in the last 12 months. This long release gap is strong evidence of abandonment risk, though the repository is not archived.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no updates for years. No provided signal shows compensating maintenance activity.
Composer build tooling is present, but no security scanning tooling was detected. This is a modest transparency and maintenance gap, especially for a project with no recent activity.
The repository has no security policy. That weakens vulnerability-reporting transparency, although it is less significant than the prolonged lack of releases and commits.
Version v0.1.1 is not a stable major release, which suggests a less mature API. Its non-prerelease status provides some stability, but does not offset the very old project state.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ALPIXEL |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/symfony Version ~2.8|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.