grogy/linkify-bundle

The package includes tests, a changelog, clear licensing, and a repository that matches its name and documentation. Maintenance evidence is weak, with no recent release or commit activity and no repository security policy or scanning; pin it only if its older Symfony compatibility remains suitable.

Latest v1.0.5

Packagist

55%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. A single maintainer increases continuity risk, especially alongside the lack of recent commit and release activity.

Release history

The package has had 6 releases, but its latest release was over 5 years ago and there were no releases in the last 12 months. This is meaningful evidence of stagnation for a dependency that may need framework compatibility updates.

Repo commit activity

The repository had no commits and no active maintainers during the last 3 months, consistent with the package's long release gap. That lowers confidence that compatibility or defects will be addressed.

Repo tooling

Composer is used for builds, but no security-scanning tools were detected. The build tooling is appropriate, while the missing scanning adds a modest maintenance and assurance gap.

Security policy

The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less severe than an archived or deprecated project.