gemorroj/cron-bundle

The MIT license, tests, readable documentation, and release notes make the package straightforward to inspect and integrate. Maintenance is a concern because releases stopped over six years ago, recent commits are absent, and the project lacks a security policy. The workflow also uses one unpinned action.

Latest 4.0.0

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 29 releases since September 2018, but its latest registry release was in April 2020 and there were no releases in the last 12 months. This materially raises abandonment and compatibility risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last registry release being over six years ago, this indicates weak current maintenance.

Security policy

No security policy was found in the linked repository. This is a transparency and vulnerability-reporting gap, though the package's tests, license, and visible source provide some compensating evidence.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but its one action reference is unpinned. The lack of a top-level permissions block is acceptable on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nikita Loges

Contributors

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^2.6	—	—
symfony/config Version ^4.4\|^5.0	—	—
doctrine/common Version ^2.8	—	—
symfony/console Version ^4.4\|^5.0	—	—
symfony/process Version ^4.4\|^5.0	—	—