leandro980/skebby-bundle

The MIT license, complete source tree, and release notes make integration straightforward. The small maintainer base and absent security policy leave you responsible for fixes; pin v4.0.0.

Latest v4.0.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 12 releases since May 2019, but its latest release was in December 2021 and it had no releases in the last 12 months. This indicates a long maintenance gap.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and indicating inactive maintenance.

Maintainers

Only one registry maintainer is listed, leaving a thin publishing base. The linked repository is also owned by an individual, so there is no organizational backing shown to compensate for that limitation.

Project backing

The repository owner is an individual user rather than an organization, and no broader project backing is shown. That makes the inactive single-maintainer project more dependent on one person.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance concern rather than evidence that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leandro Luccerini

Direct Dependencies

Dependency	Last Release	Score
guzzlehttp/guzzle Version ^7.0	—	—
karriere/json-decoder Version ^4.0	—	—
symfony/framework-bundle Version 5.4.*\|^6.0	—	—
instasent/sms-counter-php Version ^0.5.2	—	—
giggsey/libphonenumber-for-php Version ^8.10	—	—