coreshop/fixture-bundle

The package is clearly licensed, stable, and backed by the CoreShop organization, with a straightforward Composer build. Its small repository footprint and lack of security tooling leave less evidence about ongoing maintenance and release discipline.

Latest 4.1.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has a substantial history of 112 releases since 2017, but it has made no releases in the last 12 months; this is a meaningful sign of slowing maintenance despite the long track record.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months. The release was pushed recently, which partly offsets the concern, but current development activity is still unconfirmed.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package, creating some uncertainty about repository ownership. The matching CoreShop organization provides partial compensation.

Repo tooling

Composer is used as the build tool, but no repository security-scanning tool was detected. The missing scanning coverage is a modest transparency gap rather than evidence of abandonment.

Security policy

The repository has no security policy. This reduces the project's documented vulnerability-reporting transparency, though it does not by itself show unsafe maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

CoreShop Team

Dominik Pfaffenbauer

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^2.9	—	—
doctrine/dbal Version ^2.13	—	—
pimcore/pimcore Version ^10.6	—	—
symfony/twig-bundle Version ^5.2.0	—	—
doctrine/data-fixtures Version ^1.5	—	—