core23/lastfm-bundle
Recent repository activity is absent, and the project has no security policy or scanning tool. It does include tests, release notes, documentation, and a matching MIT license; use nucleos/lastfm-bundle instead.
43%
Total Score
75
75
50
Health Score Breakdown
Packagist marks the package abandoned at package scope and names nucleos/lastfm-bundle as the replacement, making this release a poor dependency choice despite other healthy evidence.
The package has been published since January 2017 with 13 releases, but only one release in the last 12 months and a median interval of about 236 days indicate a slow cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that current maintenance is limited.
Composer and Make are used for project tooling, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
No repository security policy was found, so there is no documented path for reporting vulnerabilities.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christian Gripp |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2.4 || ^3.0 | — | — |
nucleos/lastfm Version ^3.2 | — | — |
symfony/config Version ^6.4 || ^7.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.