Package Health/flowcode/financial-bundle

flowcode/financial-bundle

Tests, an MIT license, and organization backing improve transparency, but the package has little evidence of ongoing care. Its mature age without security tooling or a security policy adds adoption risk.

Latest 0.1.2

Packagist

32%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package was first released about 9 years ago, has only 2 releases, and has had no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers over the last 3 months, consistent with its last push being about 9 years ago. No provided maintenance signal compensates for this inactivity.

Repo tooling

The repository uses Composer and Phing, showing some build structure, but it has no security-scanning tools. That is a maintenance and transparency gap for a financial bundle.

Security policy

The repository has no security policy. This is a modest transparency gap, especially for software handling financial-domain entities, though it is less significant than the lack of maintenance.

Version stability

Version 0.1.2 is not a stable major release, which indicates an immature compatibility promise. The package's long period without releases further reduces confidence that it will receive needed evolution.