Package Health

cubetools/cube-common-bundle

Tests, release notes, and organization backing provide useful maintenance evidence. Install-time hooks and the lack of security tooling add operational concerns alongside the long period without changes.

Latest 1.9.21PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding install-time behavior that consumers must account for. No provided signal shows that these hooks are unnecessary or compensated for.

Release historycaution

The package has 64 releases since 2017, but none in the last 12 months and the latest release was nearly three years ago. Its historically regular cadence does not compensate for the current inactivity.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.

Repo issue activitycaution

There were no newly opened or closed issues and no merged pull requests in the last month, while 9 issues and 5 pull requests remain open. This reinforces the evidence of stalled maintenance.

Repo toolingcaution

The repository uses Make and Composer, which supports repeatable project work, but it reports no security-scanning tools. That is a modest transparency and maintenance gap for a dependency with application-facing code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

CUBE Team of Emch + Berger AG Bern

Direct Dependencies

DependencyLast ReleaseScore
symfony/ldap
Version ^3.0|^4.0
—
—
symfony/config
Version ^2.7|^3.0|^4.0
—
—
phpoffice/phpspreadsheet
Version ^1.4
—
—
friendsofsymfony/user-bundle
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform