gupalo/changelog-bundle

Release historydanger

The latest release was published in August 2022, with no releases in the last 12 months despite nine releases overall. This long inactivity is strong evidence of abandonment risk.

Dependency profilecaution

The package has 13 runtime dependencies for a small Symfony bundle, increasing compatibility and maintenance surface. The dependency list is still identifiable and ecosystem-relevant, so this is a moderate concern rather than a severe risk.

Repo popularitycaution

The repository has zero stars and forks and only two watchers. Popularity is supporting evidence rather than a verdict, but these figures provide little evidence of an active user or contributor community.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling is present. This weakens maintenance and transparency evidence, although it does not by itself make the release unsafe.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a genuine transparency gap for a dependency used in applications.