Package Health/fastbolt/command-scheduler

fastbolt/command-scheduler

Usable with caveats: the package is actively published, backed by a matching organization repository, and has basic testing and security tooling. It is very young, has only one active contributor, and its workflows lack explicit token permissions and a security policy.

Latest v0.4.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 14 runtime dependencies, including framework, database, security, and serialization components. This is a relatively broad dependency surface for a young package and increases upgrade and compatibility obligations.

Package scaffolding

The artifact includes a README and tests, and the repository also has tests and uses GitHub Releases. The README is only 20 characters and there is no changelog, limiting consumer guidance, but absent changelogs are not required in the published artifact.

Repo bus factor

One contributor made 100% of the two commits in the last three months. This concentration creates continuity risk, although the repository is organization-owned and therefore has some potential for handoff.

Repo commit activity

The repository has two commits in the last three months, both from one active maintainer. Recent activity exists, but the low volume suggests maintenance capacity is still limited.

Security policy

The repository has no security policy. This is a transparency and vulnerability-reporting gap for a package that includes framework, database, and security-related functionality.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Hirtzbruch

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^2.12\|^3.2	—	—
symfony/lock Version ^7.4	—	—
symfony/config Version ^7.4	—	—
symfony/console Version ^7.4	—	—
symfony/serializer Version ^7.4	—	—