Package Health

baldinof/roadrunner-bundle

Clear licensing, release notes, tests, and a matching repository make the package easy to evaluate. Recent release activity is strong, but no commits were recorded in the last three months, and workflow references are not pinned. The missing security policy and automated security scanning add smaller maintenance concerns.

Latest 3.4.0PackagistPackagist

70%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Maintainerscaution

Only one registry maintainer is listed. Because the repository is also user-owned and the package has a substantial release history, this is a modest bus-factor concern rather than evidence of abandonment.

Project backingcaution

The package and repository are owned by the same individual account, so there is no organization backing to offset the single-publisher structure. The active release history provides some compensation, making this a mild concern rather than a severe risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a real maintenance warning, although the recent release and longer release history partly offset it.

Repo issue activitycaution

Issue and pull-request activity is limited, with one new issue and one new pull request in the last month and no closures or merges. This suggests modest current activity, but it is less concerning than a fully inactive repository.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. For a dependency intended for production applications, that leaves a repository hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Florent Baldino

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^2.0 || ^3.0
—
—
symfony/yaml
Version ^5.4 || ^6.0 || ^7.0 || ^8.0
—
—
spiral/goridge
Version ^4.0
—
—
symfony/config
Version ^5.4 || ^6.0 || ^7.0 || ^8.0
—
—
spiral/roadrunner
Version ^2023.1.0 || ^2024.1.0 || ^2025.1.0
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform