kinone/bundle

The package has a single registry maintainer, no security policy, and no repository security scanning. Its MIT license, matching repository, and small dependency footprint provide some transparency, but the long inactivity remains a substantial concern.

Latest v1.0.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the last release about 8 years ago and none in the past 12 months. This strongly indicates abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past 3 months, consistent with the last push occurring about 8 years ago.

Repo popularity

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than decisive, but these values provide little evidence of active community support.

Repo tooling

Composer is used for the build, which is appropriate, but no security scanning tools are configured. That weakens ongoing maintenance assurance.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap for a package that has been inactive for years.