doopcompany/doop-elasticsearch-bundle
Risky to adopt: the package has had no release or repository activity for over four years and has only one published version. It is clearly licensed, documented, and backed by a matching organization repository, but the lack of ongoing maintenance makes compatibility and abandonment risks significant.
42%
Total Score
50
100
72
90
Health Score Breakdown
This is the package's only release, published over four years ago, with no releases in the last 12 months. That leaves little evidence of ongoing maintenance or compatibility work.
The repository recorded no commits and had no active maintainers in the last three months, consistent with a project that has been dormant for over four years.
The repository has no stars or forks and only two watchers. Popularity is not required for a small bundle, but these values provide little supporting evidence of active community use.
Composer is used as the build tool, but no security scanning tools are present. This is a modest transparency and maintenance gap, though it is less significant than the inactivity.
The linked repository is not archived, but its last push was over four years ago. The unarchived status is positive, while the old repository state still supports the maintenance concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/framework-bundle Version ^5 || ^6 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.