bolt/bolt-assets

The release is a prerelease from about seven years ago, and all recent repository commits come from one contributor. The MIT license, active organization-owned repository, and lack of install scripts are positive, but the package is intended only as backend assets.

Latest 4.0.0-beta.2.3

Packagist

20%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and identifies bolt/assets as the replacement. This is a direct reason not to start depending on this package.

Release history

The package has had no release in about seven years, despite six releases concentrated in its first month. That makes this specific release stale and raises abandonment risk.

Repo bus factor

One contributor made all five commits in the last three months. Organization ownership provides some handoff capacity, but the observed activity remains concentrated.

Repo package mention

The repository name does not match the package name and its README does not mention bolt/bolt-assets. Although name differences are normal for subpackages, the combination leaves package ownership less transparent.

Repo tooling

The repository uses Composer for builds but reports no security-scanning tools. That leaves security hygiene less visible, while the small asset-focused scope limits the impact.