horde/bundle

Release historycaution

The package has existed for over four years with six releases, but only two releases in the last 12 months and a median interval of about 11 months indicate a slow maintenance cadence.

Repo bus factorcaution

All recent commits come from one contributor, which is a maintenance weakness, although the organization-owned project provides some capacity to hand work off.

Repo commit activitycaution

Only two commits were made in the last three months by one active maintainer, showing limited recent development activity.

Repo toolingcaution

The project uses Composer, but no security-scanning tool was detected; the missing scanner is a modest transparency gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.