Package Health

maciejlewandowskii/ifirma-bundle

iFirma Symfony Bundle for easy invoicing integration.

Latest v1.0.0PackagistPackagist

68%

Total Score

caution

Usable with caveats: only one release, no recent commits, and every workflow action is unpinned.

Health Score Breakdown

Release historycaution

This is a young package, about 98 days old, with only one release and no established release cadence, so long-term maintenance is not yet demonstrated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package that has only one release.

Security policycaution

The repository has no security policy. This is a transparency gap, but it is less serious than evidence of abandoned or unsafe maintenance.

Workflow auditcaution

All four workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned, leaving workflow dependencies exposed to upstream changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Developer

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3.0
—
—
symfony/config
Version ^7.2
—
—
symfony/console
Version ^7.2
—
—
symfony/messenger
Version ^7.2
—
—
symfony/validator
Version ^7.2
—
—

Weekly Downloads

Info

Last Published
3 months ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform