enhavo/resource-bundle

The repository has had no commits or active maintainers in the last three months, despite a recent push. The linked repository does not name or mention this package, and it has no security policy or scanning, although releases remain regular and the project is organization-backed.

Latest v0.15.14

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, partially offset by the recent registry release history and recent repository push.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the link may not clearly establish that this repository publishes this package. Organization ownership and matching namespace provide only partial reassurance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a framework library this weakens ongoing security transparency, though it is not severe on its own.

Security policy

The repository has no security policy. This leaves vulnerability reporting and response expectations unclear, which is a genuine transparency gap for a dependency.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gerhard Seidel

Direct Dependencies

Dependency	Last Release	Score
enhavo/api-bundle Version ^0.15	—	—
symfony/security-csrf Version ^6.4	—	—
winzou/state-machine-bundle Version ^0.6.2	—	—
pagerfanta/doctrine-orm-adapter Version ^4.2	—	—