kematjaya/step-bundle

A single maintainer, no security policy, and no security scanning reduce confidence in ongoing stewardship. The MIT declaration and stable 1.1.7 release are helpful, but the project shows limited transparency and support capacity.

Latest 1.1.7

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published in October 2021, and there have been no releases in the last 12 months despite nine total releases. This long pause is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's prolonged release inactivity.

Maintainers

Only one account has registry publishing access. Because the project is user-owned rather than organization-backed, this indicates a thin publishing base, although access records do not prove actual maintenance activity.

Repo package mention

The linked repository is named bootstrap-step-bundle rather than kematjaya/step-bundle, and no README package mention was collected. This creates caution that the repository may not clearly correspond to the package.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That leaves less evidence of routine security hygiene in a project already showing limited recent activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nur Hidayatullah

Direct Dependencies

Dependency	Last Release	Score
symfony/twig-bundle Version ^5.3	—	—
doctrine/collections Version ^1.6	—	—
symfony/security-core Version ^5.3	—	—
symfony/framework-bundle Version ^5.0	—	—