Package Health/dbp/relay-frontend-bundle

dbp/relay-frontend-bundle

Usable with caveats: the package is actively released, backed by a matching organization repository, and has tests and a changelog. However, no commits or active maintainers were recorded in the last three months, and the repository lacks security scanning and a security policy.

Latest v0.1.18

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs a post-autoload-dump script during installation. This is an additional installation-time behavior that deserves review, though the signal does not show it is dangerous.

Repo commit activity

No commits and no active maintainers were recorded in the last three months. Although five pull requests were merged recently, the absent commit activity is a meaningful maintenance concern.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This weakens automated supply-chain and code-quality oversight.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency and maintenance gap.

Token permissions

The only workflow lacks top-level token permissions. While no write permissions were observed, explicitly restricting permissions would provide stronger workflow hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
symfony/config Version ^6.4 \|\| ^7.4	—	—
symfony/serializer Version ^6.4 \|\| ^7.4	—	—
symfony/http-kernel Version ^6.4 \|\| ^7.4	—	—
api-platform/openapi Version ^4.1	—	—
api-platform/metadata Version ^4.1	—	—