happyr/linkedin-bundle

The included tests, README, and MIT license make the package straightforward to inspect. Its small dependency footprint helps, but maintenance evidence is weak and the repository lacks a security policy and scanning.

Latest 1.0.0

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published over 8 years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last 3 months, while the last repository push was nearly 7 years ago. This substantially increases the chance that compatibility issues will go unfixed.

Repo issue activity

There was no issue or pull-request activity in the last month, with one issue and one pull request still open. This supports the broader picture of inactive maintenance.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance-hygiene gap, not evidence that the package is unsafe.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This lowers transparency for a package intended to make external API requests.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tobias Nyholm

Direct Dependencies

Dependency	Last Release	Score
symfony/http-kernel Version ^2.3 \|\| ^3.0 \|\| ^4.0	—	—
happyr/linkedin-api-client Version ^1.0	—	—
symfony/dependency-injection Version ^2.3 \|\| ^3.0 \|\| ^4.0	—	—