ldiro/media-bundle

The MIT license and detailed README make the package easier to evaluate and integrate. Its dependency surface is substantial, while the repository has no security policy or scanning, increasing maintenance overhead.

Latest 5.2.7

Packagist

35%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Thirteen runtime dependencies create a meaningful compatibility and maintenance surface for a Symfony bundle. These dependencies are also consistent with the package's stated media-management functionality, so this is a modest concern rather than a severe risk.

Project backing

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to compensate for the inactive maintenance record.

Release history

The package has had no release in more than six years, despite 51 releases overall. This strongly increases abandonment risk, although the repository is not archived and the registry does not mark the package deprecated.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the absence of recent releases. The non-archived status does not compensate for the lack of observed activity.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and no pull requests were merged. This provides no evidence of current maintenance or responsiveness.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Arthur Gribet

Arkounay

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^2.5	—	—
symfony/form Version ^4.1	—	—
symfony/config Version ^4.1	—	—
symfony/validator Version ^4.1	—	—
symfony/http-kernel Version ^4.1	—	—