Package Health/draw/sonata-import-bundle

draw/sonata-import-bundle

Healthy and actively maintained, with frequent releases, recent commits, and a tested codebase. It has a small audience, one main contributor, and no security policy, so review updates before adopting it broadly.

Latest 0.43.0

Packagist

78%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo bus factor

Two contributors were active recently, but the leading contributor made 80% of the commits. The second active contributor provides some continuity, but maintenance remains concentrated.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher. Popularity is only supporting evidence, but this gives little external evidence of broad review or adoption.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. The build setup is appropriate, while the missing automated security checks leave a modest hygiene gap.

Security policy

No security policy was found in the repository. For a bundle that imports data into application entities, the lack of a documented vulnerability-reporting process is a meaningful transparency gap.

Version stability

Version 0.43.0 is not a stable-major release, so the public API may still change despite the absence of prereleases. This is a manageable adoption caveat rather than a maintenance concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Martin Poirier Theoret

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^3.6	—	—
symfony/notifier Version ^7.4.0	—	—
symfony/validator Version ^7.4.0	—	—
draw/sonata-extra-bundle Version ^0.43	—	—
symfony/event-dispatcher Version ^7.4.0	—	—