Package Health

marks12/restgeneratorbundle

Its MIT declaration and matching source repository provide basic transparency, while the repository is not archived. No security scanning and no visible test suite leave limited evidence of project care.

Latest 0.4.6PackagistPackagist

30%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historydanger

The package is nearly 10 years old, with 11 releases clustered in November 2016 and no releases in the last 12 months. This strongly indicates abandonment risk.

Repo commit activitydanger

There were no commits and no active maintainers in the preceding three months. Combined with the old last push, this is strong evidence that maintenance has stopped.

Package scaffoldingcaution

The artifact includes a substantial README and this version has a GitHub release, but it contains no tests and its README explicitly warns that the bundle is bad and not working. Missing tests are normal packaging practice, so the warning is the material concern.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are configured. This is a transparency and maintenance gap, though it is less serious than the prolonged inactivity.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, but it is secondary to the package's lack of recent maintenance.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Matt Bonneau
David Dan

Direct Dependencies

DependencyLast ReleaseScore
nelmio/cors-bundle
Version >=1.4
—
—
jms/serializer-bundle
Version >=1.1
—
—
nelmio/api-doc-bundle
Version ^2.13
—
—
sensio/generator-bundle
Version >=3.0
—
—
friendsofsymfony/rest-bundle
Version >=1.7
—
—

Weekly Downloads

Info

Last Published
9 years ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform