mahefa/user-bundle

Release historydanger

The latest release was about four years ago, with no releases in the last 12 months and only three releases overall. This strongly raises abandonment risk for a framework integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no observed maintenance activity.

Repo toolingcaution

The project uses Make and Composer, showing build tooling, but no security-scanning tools were detected. That weakens ongoing maintenance assurance.

Security policycaution

The linked repository has no security policy. For a user-management bundle handling authentication-related functionality, this is a meaningful transparency and maintenance gap.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned. The absence of a top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene concern.