limenius/react-bundle

The clear README, release notes, MIT licensing, and organization ownership provide useful transparency. However, maintenance has effectively stopped, leaving compatibility and support uncertain for a new Symfony project.

Latest v5.1.0

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 28 releases but none in the last 12 months, and its latest release was nearly five years ago. This is strong evidence of abandonment risk despite a previously regular release cadence.

Repo commit activity

There were zero commits and zero active maintainers in the last three months, consistent with the nearly five-year-old latest release. This substantially raises abandonment and compatibility risk.

Lifecycle scripts

post-install-cmd and post-update-cmd scripts run during dependency operations, adding installation complexity and execution surface. No provided signal shows that these scripts are harmful, so this is a moderate hygiene concern rather than a severe risk.

Repo issue activity

The repository has eight open issues and no issue or pull request activity in the last month, with no merged pull requests. The unresolved backlog reinforces the evidence of inactive maintenance.

Repo tooling

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a hygiene gap, though it is less important than the demonstrated maintenance stoppage.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

nacho

Direct Dependencies

Dependency	Last Release	Score
symfony/config Version ^2.7.0\|^3.0.6\|^4.0\|^5.0\|^6.0	—	—
symfony/http-kernel Version ^2.7.0\|^3.0.6\|^4.0\|^5.0\|^6.0	—	—
limenius/react-renderer Version ^5.0.0	—	—
symfony/dependency-injection Version ^2.7.0\|^3.0.6\|^4.0\|^5.0\|^6.0	—	—