Package Health/darkorsa/cordo-bundle-users

darkorsa/cordo-bundle-users

The package has a clear README, matching source repository, MIT licensing, and no install-time scripts. Maintenance evidence is weak: only four releases, no releases in over a year, and no commits in the last three months; security coverage is also limited.

Latest 0.60.0

Packagist

54%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only four releases and none in the last 12 months; its latest release was about 20 months ago. This is meaningful maintenance concern, though the repository was pushed more recently.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the long release gap, this is evidence of slowed maintenance.

Repo tooling

Composer is used for builds, but no security scanning tools were detected. That limits automated oversight for a package handling user and authentication-related code.

Security policy

The repository has no security policy. The README provides a contact address for security issues, which offers some reporting guidance but not a documented security process.

Version stability

Version 0.60.0 is not a stable-major release, so compatibility expectations are less certain. It is not marked as a prerelease, which partly offsets that concern.