anzusystems/serializer-bundle
Healthy and suitable to depend on, with a recent stable release, clear ownership, tests in the repository, and security scanning. The main caveat is that only one contributor made one commit in the last three months, while the repository lacks a security policy and explicit workflow permissions.
78%
Total Score
67
100
100
75
Health Score Breakdown
All recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off, but no second recently active contributor is shown.
Only 1 commit was recorded in the last 3 months from 1 active maintainer, which is thin recent activity despite the recent release.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented for consumers and maintainers.
The only workflow lacks top-level token permissions. No write permissions were detected, but explicit least-privilege configuration would provide stronger workflow transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 AnzuSystems Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/common Version ^3.3 | — | — |
symfony/type-info Version ^7.0|^8.0 | — | — |
nelmio/api-doc-bundle Version ^5.9 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.