Package Health/chamber-orchestra/image-bundle

chamber-orchestra/image-bundle

Symfony 8 bundle for on-demand image processing, resizing, cropping, AVIF/WebP conversion, and caching. Filter pipelines with fit, fill, optimize, strip, interlace processors and avifenc, cwebp, MozJPEG, pngquant post-processors. Filesystem, stream, and S3 loaders/resolvers. HMAC-signed runtime URLs for any client. Async processing via Messenger. Twig filters and responsive macros. Nginx/Apache/Caddy zero-PHP cache hits.

Latest v8.1.6

Packagist

77%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

One contributor made all 4 commits in the last three months, creating a concentrated maintenance dependency. Organization ownership provides some handoff capacity but does not remove the current concentration.

Repo popularity

The repository has only 2 stars and no forks or watchers, indicating limited external adoption evidence. Popularity is supporting evidence, so this is a minor caution rather than a health verdict.

Security policy

No repository security policy is present, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

Both workflows were analyzed without audit findings, and one uses read-only permissions. However, all 4 action references are unpinned and one workflow has top-level write permissions, creating workflow supply-chain and permission-hygiene concerns without an untrusted trigger or sink.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Andrew Lukin

Girchenko Mikhail

Direct Dependencies

Dependency	Last Release	Score
psr/cache Version ^3.0	—	—
symfony/mime Version 8.1.*	—	—
symfony/config Version 8.1.*	—	—
imagine/imagine Version ^1.5	—	—
symfony/process Version 8.1.*	—	—