Package Health/bongo/bongo-s3asset-installer-bundle

bongo/bongo-s3asset-installer-bundle

The package has a clear README, an MIT declaration, and only two runtime dependencies. However, no commits or releases have appeared since 2019, while one maintainer and absent security tooling increase abandonment and maintenance risk.

Latest 1.0.8

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in February 2019, with no releases in the last 12 months. More than seven years without a release is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the package's long release gap. The repository is not archived, but there is no observed current maintenance.

Maintainers

The registry lists one maintainer, and the repository owner is an individual rather than an organization. This leaves limited visible capacity to maintain or recover the package.

Repo popularity

The repository has zero stars and zero forks, with one watcher. Popularity is only supporting evidence, but these counts provide little evidence of a broader user or contributor community.

Repo tooling

Composer is used for the build, which is appropriate, but no security scanning tools are present. That weakens maintenance and supply-chain transparency for a package that handles deployment assets.