gdbots/iam-bundle

The package has a clear license, tests, release notes, and a long release history. Maintenance activity is currently absent, and the linked repository does not identify this package in its name or README, which makes ongoing ownership less clear.

Latest v5.0.0

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed for about 8 years with 18 releases and one release in the last 12 months. The recent cadence is limited but still shows a current release rather than abandonment.

Repo commit activity

No commits and no active maintainers were recorded during the last 3 months. Although a release was published during the broader recent period, the absence of ongoing repository activity is a meaningful maintenance concern.

Repo package mention

The repository name does not match the package name and its README does not mention gdbots/iam-bundle. Because this is not explained by a visible package reference, the linked repository may not clearly belong to this package.

Repo popularity

The repository has 0 stars and 1 fork, indicating limited visible adoption. Popularity is only supporting evidence, so this modestly lowers confidence rather than determining the verdict.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning automation is a hygiene gap, not evidence that the release is unsafe.