dmytrof/import-bundle
The MIT license, working Composer build, and package-linked repository provide useful transparency. One maintainer, no security policy, and unpinned workflow actions leave limited maintenance and build assurance.
57%
Total Score
50
90
75
Health Score Breakdown
A single registry maintainer limits the visible publishing base, although the linked repository and matching personal ownership provide some continuity.
The package has 45 releases since December 2019, but none in the last two years and ten months; that indicates a substantial maintenance gap despite its earlier release history.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment concerns.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package with eleven runtime dependencies.
Both workflows were analyzed successfully with no dangerous audit findings, but all four referenced actions are unpinned; the lack of top-level permissions is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dmytro Feshchenko |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/lock Version ^4.3 || ^5.0 | — | — |
guzzlehttp/guzzle Version ^6.4 || ^7.0 | — | — |
doctrine/inflector Version ^2.0 | — | — |
symfony/http-client Version ^4.3 || ^5.0 | — | — |
laminas/laminas-feed Version ^2.12 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.