Package Health/digitalstate/platform-bpm-pm-bundle

digitalstate/platform-bpm-pm-bundle

It has a clear MIT license, tests, a changelog, and a matching source repository. Organization backing and a limited dependency surface help, but the lack of security scanning and a security policy leaves assurance thin.

Latest 0.3.0

Packagist

38%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in February 2017, and there have been no releases in the last 12 months despite the package being over nine years old. This is strong evidence of abandonment risk.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Combined with the old last-pushed date, this materially increases abandonment risk.

Dependency profile

The package declares four runtime dependencies, including PHP, Oro components, and a related DigitalState package. This is a manageable surface, though dependency compatibility may be harder to verify for such an old release.

Repo popularity

The repository has zero stars and forks and only two watchers. Low popularity is not decisive, but it provides little supporting evidence of community review or shared maintenance.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.