itmedia/zippy-bus-bundle

Release historydanger

There has been only one release, published about nine years ago, with no releases in the last 12 months. This is strong evidence of abandonment for a package intended as an application dependency.

Repo popularitycaution

The repository has three stars, no forks, and one watcher. Low popularity is only supporting evidence and is not itself a health verdict, but it offers little additional confidence in long-term support.

Repo toolingcaution

Composer is used as a build tool, which fits the package ecosystem. No security-scanning tooling is present, a minor transparency gap that is outweighed by the much older maintenance history.

Security policycaution

The repository has no security policy. This modestly reduces transparency, although it is less important than the lack of releases and activity for this small package.

Workflow auditcaution

No GitHub Actions workflows were found, so there are no workflow risks to assess. This also provides no evidence of automated maintenance or security checks.