boshurik/api-bundle
Clear licensing, tests, and a useful README support adoption. The narrow dependency set is reasonable, but security documentation is absent and long-term maintenance is uncertain.
45%
Total Score
25
100
71
83
Health Score Breakdown
The latest release was published in April 2021, with no releases in the last 12 months and only five releases overall. This is strong evidence of prolonged inactivity for a maintained library.
There were no commits and no active maintainers in the three months before collection, consistent with the repository's last push in April 2021 and indicating a serious maintenance risk.
The repository is owned by the same individual namespace as the registry package, providing consistent ownership context but no organizational maintenance capacity.
Composer build tooling is present, but no security scanning tooling was detected. This is a secondary transparency gap, not evidence that the package is unsafe by itself.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This matters for a framework integration library but is less significant than the prolonged inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 BoShurik |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/validator Version ^5.0 | — | — |
symfony/serializer Version ^5.0 | — | — |
symfony/framework-bundle Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.