edrush/extbaser-bundle

The package is small and easy to inspect, with a README, changelog, matching repository, and no install-time scripts. Its old release and inactive repository make compatibility and support uncertain; the GPL declaration also conflicts with the detected MIT license.

Latest v0.1.0

Packagist

36%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published over 11 years ago, with no releases in the last 12 months. That strongly indicates abandonment risk for a dependency targeting evolving Symfony and TYPO3 ecosystems.

Repo commit activity

The repository recorded no commits or active maintainers in the last 3 months, and its last push was over 8 years ago. This is strong evidence that maintenance has stopped.

License

The artifact contains a license file and the repository also has one, so licensing is documented. However, the manifest declares GPL while the detected license is MIT, creating a material licensing ambiguity.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling was found. This is a secondary transparency and maintenance gap beside the much stronger inactivity evidence.

Security policy

The linked repository has no security policy. For a small, long-inactive package this reduces clarity about vulnerability reporting and supported versions.