Package Health/ekyna/subscription-bundle

ekyna/subscription-bundle

The MIT license and small dependency set are positives. The README is only 174 characters with unfinished TODOs, and the repository has no security policy, limiting transparency for a package handling subscriptions and payments.

Latest v0.1

Packagist

44%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, v0.1, first published over 11 years ago, with no releases in the last 12 months. That is strong evidence of a potentially abandoned dependency.

Package scaffolding

The package includes a README, but it is very short and contains unfinished setup and configuration TODOs. The absence of tests and a changelog is normal for published artifacts and is not treated as a gap here.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, the recent activity gap still raises maintenance risk.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package. That creates some uncertainty about whether the repository directly backs this package.

Security policy

The linked repository has no security policy. For a package involving subscriptions and payments, that reduces transparency around vulnerability reporting and maintenance response.