kpicaza/gen-bundle

The linked repository does not clearly identify this package, and it has no security policy, which weakens transparency. The MIT license, README, tests, and no install scripts provide useful safeguards, but do not offset the long-term maintenance risk.

Latest v0.0.3

Packagist

40%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in May 2016, with no releases in the last 12 months and only three releases overall. This is strong evidence that the package is no longer maintained.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases and a high abandonment risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month, while four issues remain open. This indicates little current project attention.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the link does not clearly establish that this repository belongs to the published package.

Security policy

The linked repository has no security policy. For an old package with no recent activity, this leaves vulnerability reporting and response expectations unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Koldo Picaza

Direct Dependencies

Dependency	Last Release	Score
symfony/yaml Version ~2.7\|~3.0	—	—
symfony/console Version ~2.7\|~3.0	—	—
symfony/process Version ~2.7\|~3.0	—	—
fzaninotto/faker Version ~1.3	—	—
nelmio/cors-bundle Version ^1.4	—	—