Package Health

enhavo/app-bundle

EnhavoAppBundle

Latest v0.15.14PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Dependency profilecaution

The package declares 31 runtime dependencies, including substantial Symfony, Doctrine, and Enhavo components. This increases integration and update surface, but is consistent with a full application bundle.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release and push show current packaging activity, but do not fully compensate for the lack of observed development activity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the source-to-package relationship is not clearly established. Organization backing and the subtree-split README context partly compensate, but the mapping remains a caution.

Repo popularitycaution

The repository has zero stars and forks and only 2 watchers. Popularity is supporting evidence rather than a verdict, but these counters provide little independent confidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gerhard Seidel

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.14
—
—
enhavo/type
Version ^0.15
—
—
doctrine/orm
Version ^2.13
—
—
symfony/form
Version ^6.4
—
—
symfony/yaml
Version ^6.4
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform