Package Health

helppc/encryption-bundle

A small but active contributor base and strong test, release, and build records support day-to-day use. Keep the workflow credential-sharing finding and absent security policy in mind for a security-sensitive encryption integration.

Latest v2.1.0PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package is young at 46 days with five releases, so long-term maintenance is not yet established; recent repository activity partly compensates for the short history.

Repo popularitycaution

The repository has only one star and no forks, offering little external validation; popularity is supporting evidence rather than a health verdict, and stronger activity signals compensate.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented for a security-sensitive package.

Workflow auditcaution

All four workflows were analyzed successfully, all five action references are pinned, and no untrusted checkout or script-injection paths were found. Two high-confidence medium-severity secrets-inherit findings and one workflow with top-level write permissions are meaningful credential-hygiene concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tomáš Kulhánek

Direct Dependencies

DependencyLast ReleaseScore
symfony/config
Version ^7.4 || ^8.0
symfony/console
Version ^7.4 || ^8.0
spaze/encryption
Version ^3.0
symfony/http-kernel
Version ^7.4 || ^8.0
symfony/dependency-injection
Version ^7.4 || ^8.0

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform