Package Health

anzusystems/anzutap-bundle

Release activity, tests, release notes, and organization backing provide useful maintenance evidence. The repository lacks a security policy, and its two workflow actions are unpinned. The recent pause in commits is worth monitoring despite the latest release.

Latest 0.13.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

93

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The release pushed today and the recent release cadence partly compensate, but the short-term development pause still lowers confidence in ongoing maintenance.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency for a library, although composer-audit provides some separate security tooling.

Version stabilitycaution

Version 0.13.0 is not a stable major release, but it is not a prerelease and recent releases have no prerelease share. The 0.x major version signals API stability may still be evolving, rather than abandonment.

Workflow auditcaution

The complete audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence findings, and the workflow does not grant top-level write access. However, both analyzed action references are unpinned, which leaves the build exposed to moving action code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

AnzuSystems Community

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.8
—
—
symfony/uid
Version ^7.1|^8.0
—
—
symfony/config
Version ^7.1|^8.0
—
—
symfony/console
Version ^7.1|^8.0
—
—
symfony/http-client
Version ^7.1|^8.0
—
—

Weekly Downloads

Info

Last Published
4 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform