avpretty/grid-bundle
Documentation is unusually thorough, and the MIT license and small dependency set make the package straightforward to evaluate. However, the project shows no recent maintenance and has no security policy, so it is a poor choice for new dependencies.
38%
Total Score
0
100
75
75
Health Score Breakdown
The latest release was published in September 2017, with zero releases in the last 12 months and only four releases overall. This long period without releases is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided activity signal compensates for this lack of maintenance.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a minor hygiene concern rather than a standalone reason to reject the package.
The repository has no security policy or documented security contact. This weakens transparency and incident-handling expectations for a package intended for application integration.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 AlexyAV |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ~1.12|~2 | — | — |
symfony/framework-bundle Version ~2.3|~3.0 | — | — |
symfony/dependency-injection Version ~2.3|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.