connectholland/file-upload-bundle

Registry deprecationdanger

Packagist marks the entire package as abandoned and names vich/uploader-bundle as its replacement. This is a direct indication that new projects should not depend on this package.

Release historydanger

The package has had only three releases, all concentrated in August 2016, with no releases in the last 12 months and roughly 10 years since the latest release. This strongly reinforces the abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the past three months. Together with the archived state, this shows no current maintenance capacity.

Repository archiveddanger

The linked repository is archived, with its last push in February 2017. An archived source repository is a severe abandonment risk for a dependency.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. The build setup is ordinary, while the missing scanning is a minor hygiene gap rather than the main risk.