enhavo/user-bundle

The repository has no security policy or security-scanning tooling, reducing transparency for a security-sensitive user bundle. Regular releases and organization backing provide useful continuity, but they do not fully offset the maintenance and ownership concerns.

Latest v0.15.14

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, even though the registry shows recent releases.

Repo issue activity

There were no new or merged pull requests in the last month, and no issue activity was recorded. With open-issue data unavailable, this supports caution about current project engagement but is not conclusive abandonment evidence.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Although the repository appears related to the organization, this leaves the exact source-package relationship less transparent.

Repo popularity

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of adoption or review.

Repo tooling

Composer build tooling is present, but no security-scanning tools are configured. The missing scanning practice is a modest transparency and maintenance concern for a package handling authentication features.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Gerhard Seidel

Direct Dependencies

Dependency	Last Release	Score
enhavo/app-bundle Version ^0.15	—	—
enhavo/form-bundle Version ^0.15	—	—
laminas/laminas-stdlib Version ^3.2	—	—
symfony/password-hasher Version ^6.4	—	—
symfony/security-bundle Version ^6.4	—	—