Package Health

imper86/ddd-bundle

The repository has no recent commits, tests, or security policy, leaving little evidence of ongoing care. A license file and matching repository make the package transparent, but the maintenance gap is substantial.

Latest v0.2.0PackagistPackagist

40%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The latest release was in October 2022, and there have been no releases in nearly four years despite nine total releases. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Package scaffoldingcaution

The package includes a very short 32-character README and no tests or changelog. Missing tests and changelog are normal in published artifacts, but the minimal consumer documentation leaves a real transparency gap.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap that reinforces the limited evidence of ongoing care.

Security policycaution

No security policy was found, so users have no documented process for reporting vulnerabilities. This adds a maintenance and transparency concern, though it is not evidence of a vulnerability itself.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

imper

Direct Dependencies

DependencyLast ReleaseScore
imper86/ddd
Version ^2.0
symfony/config
Version ^6.0
symfony/messenger
Version ^6.0
symfony/http-kernel
Version ^6.0
symfony/framework-bundle
Version ^6.0

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform