dayspring-tech/lambda-bundle
The package has clear documentation, tests, a license, and a healthy repository status. Its release and commit activity have stopped, while workflow dependencies are not pinned and no security policy or scanning is present.
58%
Total Score
50
75
50
Health Score Breakdown
The package has had 7 releases since October 2022, but none in the last 12 months; the latest release was about 18 months ago. This indicates materially reduced maintenance activity.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the release-history concern and increasing abandonment risk.
Composer is used as the build tool, but no security-scanning tool is configured. This is a modest transparency and maintenance gap rather than a severe dependency risk.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
The assessed release is not marked as a stable major version, and the registry's latest version is v0.6.0. That limits maturity confidence despite the release not being a prerelease.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jeffrey Wong |
| Stanley Situ |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 bref/bref Version ^2.1.17 | — | — |
symfony/yaml Version ^4.4|^5.0|^6.0 | — | — |
symfony/dotenv Version ^4.4|^5.0|^6.0 | — | — |
symfony/framework-bundle Version ^4.4|^5.0|^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.