jul6art/push-bundle

This is a healthy, actively maintained release with a stable major version, a recent release, ongoing repository commits from two active contributors, and no deprecation or archival indicators. The package and repository are clearly aligned, the repository includes tests, a changelog gap is partly compensated by GitHub Releases, and the artifact is licensed under MIT. The main reservations are the small project footprint, low repository popularity, and absence of automated security-scanning tooling, but these do not outweigh the evidence of current maintenance and sound repository hygiene.

Latest v2.1.1

Packagist

84%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Package scaffolding

The artifact lacks a README, tests, and changelog, but the repository contains tests and uses GitHub Releases, compensating for the missing packaged tests and changelog. The missing artifact README remains a minor documentation gap.

Repo popularity

The repository has only 6 stars, 0 forks, and 1 watcher, indicating a small user footprint. Popularity is supporting evidence rather than a verdict, so this modestly lowers confidence in ecosystem maturity but is not a severe health concern.

Repo tooling

Composer is used as the build tool, but no security-scanning tool was detected. The missing scanner is a transparency and defense-in-depth gap, partially offset by the repository's other security controls.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jul6Art

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^3.3	—	—
symfony/yaml Version ^7.4 \|\| ^8.0	—	—
symfony/config Version ^7.4 \|\| ^8.0	—	—
symfony/mercure Version ^0.6	—	—
symfony/messenger Version ^7.4 \|\| ^8.0	—	—