league/tactician-bundle
The v1.6.0 release has published notes, repository tests, and backing from an established organization. Unpinned CI actions and no security policy add smaller transparency and build-integrity concerns.
70%
Total Score
75
83
50
Health Score Breakdown
The package has been maintained since 2015 with 27 releases and a latest release on 2025-12-21, but only one release appeared in the last 12 months.
The repository had 0 commits and 0 active maintainers in the last three months, indicating currently dormant development despite the recent release.
Composer build tooling is present, but no security-scanning tools were detected, reducing automated supply-chain and vulnerability hygiene.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap rather than evidence of unsafe code.
All three analyzed action references are unpinned, which weakens build reproducibility; the audit found no untrusted checkout, script injection, high-severity issue, or top-level write permission.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rafael Dohms |
| Richard Tuin |
| Xander Smalbil |
| Ross Tuck |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^6.4|^7.0|^8.0 | — | — |
symfony/config Version ^6.4|^7.0|^8.0 | — | — |
league/tactician Version ^1.0 | — | — |
symfony/http-kernel Version ^6.4|^7.0|^8.0 | — | — |
league/tactician-logger Version ^0.10|^0.11 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.