markup/needle-bundle
Extensive tests, a changelog, and a clear MIT license support integration. The repository has no security scanning and does not clearly mention this package, so verify ownership before adoption.
58%
Total Score
50
80
50
Health Score Breakdown
The package has 66 releases over more than 11 years, but none in the last 12 months and the latest registry release was in April 2022. This is meaningful abandonment risk despite the historically regular release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, indicating no current maintenance activity. The repository was pushed in January 2023, but that does not offset the prolonged recent inactivity.
The linked repository name does not match the package name and its README does not mention the package, leaving ownership of this published package unclear. The organization-backed repository provides some context, but not enough to remove the concern.
The repository has no published security policy. This is a transparency gap for a maintained dependency, though it is less significant than the lack of recent release and commit activity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Douglas Greenshields |
| Calum Brodie |
| Markup |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ~1.12|~2.0 | — | — |
markup/json Version ^0.1 | — | — |
doctrine/orm Version ^2.4 | — | — |
doctrine/collections Version ^1.5 | — | — |
pagerfanta/pagerfanta Version ~1.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.