Package Health

combat-ui/core-pimcore-bundle

Usable with caveats: this is a clearly documented, tested, organization-backed bundle, but it has only one release and one repository contributor in its first 57 days. The missing security policy and undeclared workflow permissions add maintenance and transparency concerns.

Latest 0.0.1PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The bundle has four runtime dependencies, including Pimcore and another Combat UI bundle; this is reasonable for a Pimcore integration but increases compatibility and update obligations.

Release historycaution

Only one release has been published, with the latest release 57 days after the first because they are the same release; this leaves maintenance maturity and release continuity unproven.

Repo bus factorcaution

All repository commits in the last three months came from one contributor. Organization backing provides some handoff capacity, but current contributor diversity is still thin.

Repo commit activitycaution

The repository recorded one commit and one active maintainer over the last three months, providing some activity but little evidence of sustained maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving automated security-quality coverage unconfirmed.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jessica Benedictus
Christiaan van Dam

Direct Dependencies

DependencyLast ReleaseScore
pimcore/pimcore
Version ^11.5
combat-ui/core-bundle
Version dev-main
pimcore/admin-ui-classic-bundle
Version ^1.7

Weekly Downloads

Info

Last Published
2 months ago
Created
2 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform