Package Health

asyntai/contao-chatbot-bundle

The package is small and clearly documented, with tests, an MIT license, and no install-time scripts. Its single release, one commit in three months, and sole active contributor leave maintenance maturity unproven; the missing security policy adds a smaller transparency gap.

Latest 1.0.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This package is only 36 days old and has one release, so there is not yet enough release history to demonstrate sustained maintenance.

Repo bus factorcaution

All recent commits come from one contributor, leaving the project dependent on a single individual for observed maintenance.

Repo commit activitycaution

Only one commit was recorded in the last three months, with one active maintainer. For a package this new, that shows limited observed activity rather than established ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The absence of scanning is a modest hygiene gap, not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less transparent for users of the package.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Asyntai

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version ^6.4 || ^7.0
—
—
symfony/config
Version ^6.4 || ^7.0
—
—
contao/core-bundle
Version ^5.3
—
—
symfony/http-kernel
Version ^6.4 || ^7.0
—
—
symfony/dependency-injection
Version ^6.4 || ^7.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform