cgoit/calendar-extended-bundle
The package has a clear license, release notes, and a matching repository. Three months without commits, no security policy, and all five workflow actions unpinned leave maintenance and build-integrity concerns.
70%
Total Score
50
94
67
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months. That is a meaningful maintenance concern, although the recent release history shows the project was active earlier.
The repository has 1 star, 2 forks, and no watchers. This indicates a small user base, but popularity is supporting evidence and does not outweigh the package's release and repository continuity.
The repository has no security policy. This reduces transparency about vulnerability reporting and handling, with no provided evidence compensating for the gap.
All 5 analyzed action references are unpinned, and one workflow grants top-level write permissions. The audit found no untrusted checkout, script injection, or high-severity issue, so this is a build-hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kester Mielke |
| Carsten Götzinger |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/dbal Version ^3.3 || ^4.0 | — | — |
symfony/config Version ^5.4 || ^6.0 || ^7.3 | — | — |
symfony/routing Version ^5.4 || ^6.0 || ^7.3 | — | — |
contao/core-bundle Version ^4.13 || ^5.3 | — | — |
symfony/http-kernel Version ^5.4 || ^6.0 || ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.