johnkrovitch/cms-bundle
The project includes tests, a matching repository, MIT licensing, and no install-time scripts. Its prerelease status, single-person ownership, and limited security documentation add uncertainty for a long-term dependency.
42%
Total Score
38
75
75
Health Score Breakdown
The package has had no releases in more than five years despite 13 releases overall, indicating that maintenance and compatibility updates have likely stopped.
There were no commits and no active maintainers in the last three months, consistent with the release history and indicating a high abandonment risk.
Only one registry publishing account is listed, and the repository is owned by an individual rather than an organization; the lack of recent commits makes this thin maintainer base more concerning.
The repository is tied directly to the package namespace and is owned by the individual publisher; this is transparent ownership, but it does not provide organizational backing.
There has been no new or closed issue or pull-request activity in the last month, while four issues remain open; this provides no evidence of active maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 johnkrovitch |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.27 | — | — |
eko/feedbundle Version ^2.0 | — | — |
symfony/mailer Version ^3.4|^4.4|^5.1 | — | — |
lag/adminbundle Version ^1.1-RC2 | — | — |
symfony/routing Version ^3.4|^4.4|^5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.