integrated/content-bundle
Its 26 runtime dependencies and single registry maintainer increase upkeep and change-management risk. The package is licensed and documented, but the repository could not be found, so current maintenance and provenance cannot be verified.
40%
Total Score
50
50
70
100
Health Score Breakdown
The package has 29 releases, but none in the last 12 months and its latest release was in November 2017, nearly nine years ago. This strongly raises abandonment risk despite its earlier regular cadence.
The package declares 26 runtime dependencies, including several framework bundles and extensions, creating a substantial compatibility and maintenance burden. This is especially concerning for a release that has not been updated for years.
Only one registry account has publish access. That is not evidence of who actively maintains the code, but it does indicate limited visible publishing capacity when combined with the absent recent releases.
Version 0.7 is not a stable major release, although it is not marked as a prerelease and recent prerelease share is 0%. The versioning status adds some maturity concern alongside the long release gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 e-Active |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nelmio/alice Version ~1.7 | — | — |
twbs/bootstrap Version ~3.3 | — | — |
symfony/symfony Version ~2.8 || ~3.0 | — | — |
doctrine/mongodb Version ~1.3 | — | — |
integrated/library Version ~0.7 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.