iandolezal/bouncer
The codebase is small and easy to inspect, with clear MIT licensing. However, its maintenance record is stale, while the lack of tests and a security policy leaves little evidence of ongoing care.
43%
Total Score
0
100
81
75
Health Score Breakdown
The package has had no release in nearly four years and no releases in the last 12 months, which is strong evidence of abandonment for a dependency. Its three total releases do not compensate for the prolonged inactivity.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing that development has stopped rather than merely slowed.
Composer is used for the build, but no security-scanning tool is present. That weakens ongoing dependency and code hygiene, although it is less serious than the stale maintenance record.
The repository has no security policy, leaving users without a documented vulnerability-reporting process. This is a real transparency gap for an authentication package.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jan Doležal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version >=4.4.0 | — | — |
symfony/event-dispatcher Version >=4.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.