Package Health/markocupic/sac-cabins-bundle

markocupic/sac-cabins-bundle

This is a generally usable and transparently packaged Contao bundle with a long history, 90 releases, a stable current version, a non-archived matching repository, an explicit GPL license, repository tests, and no install-time lifecycle scripts. The main adoption risks are a single maintainer, very small community footprint, no recorded commits or active maintainers in the last 3 months, and modest repository-security hygiene gaps: no security policy and no top-level workflow permissions declaration. The release was published very recently and the repository was pushed at the same time, which partially offsets the recent inactivity signal, but the package is best treated as a small, maintainer-dependent dependency rather than a broadly supported project.

Latest 5.3.4

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, creating maintainer-bus and continuity risk. The repository is user-owned rather than organization-owned, so there is no organizational backing signal to offset this.

Project backing

The repository is owned by the individual user markocupic, matching the package identity, but no organization backing is present; this is consistent ownership evidence with limited continuity support.

Release history

The package is mature at about 8.6 years old with 90 releases, but only 2 releases occurred in the last 12 months, indicating slower recent maintenance. The very recent latest release provides some compensating evidence.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, which is a meaningful recent-maintenance concern. The repository's push on the collection date and the latest release partially compensate, preventing this from being a severe abandonment finding.

Repo issue activity

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a quiet, stable package, but it also provides little evidence of an active support community.