jms/serializer-bundle

Usable with caveats: this is a mature, licensed, non-deprecated package with a recent release, release notes, tests, and an active repository. However, the repository recorded no commits, issues, or pull-request activity in the last three months, and it lacks a security policy.

Latest 5.5.2

Packagist

72%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

No commits or active maintainers were recorded in the last three months, which is the main abandonment concern despite the recent release and non-archived repository.

Repo issue activity

The repository has 94 open issues but recorded no new or closed issues and no new or merged pull requests in the last month, suggesting limited recent issue-management activity.

Repo tooling

The repository uses Composer build tooling, but no security-scanning tools were detected, leaving a security-process gap.

Security policy

No repository security policy was found, so there is no documented process for reporting and handling vulnerabilities.

Token permissions

The one analyzed workflow has no top-level token permissions declaration. No write permissions were detected, but explicit least-privilege settings would provide stronger assurance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Johannes M. Schmitt

Asmir Mustafic

Direct Dependencies

Dependency	Last Release	Score
jms/metadata Version ^2.6	—	—
jms/serializer Version ^3.31	—	—
symfony/config Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/framework-bundle Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—
symfony/dependency-injection Version ^5.4 \|\| ^6.0 \|\| ^7.0 \|\| ^8.0	—	—