mcfedr/uuid-extra-bundle
The repository is not archived, and its tests, changelog, license, and security tooling provide useful transparency. No commits in the last three months and unpinned workflow actions add maintenance and reproducibility concerns.
20%
Total Score
25
71
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement identified. This is a direct warning that maintainers no longer recommend depending on it.
The latest release was on January 17, 2022, with no releases in the last 12 months. The long release gap indicates substantial abandonment risk despite the package's established age.
The repository recorded zero commits and zero active maintainers in the last three months. That provides no evidence of current maintenance capacity.
There were no new or closed issues or pull requests in the last month, while 8 pull requests remain open. This suggests limited recent project activity.
Both workflows were analyzed without high-confidence audit findings or untrusted checkouts, and no workflow has broad top-level write permissions. However, all 3 analyzed action references are unpinned, creating a reproducibility and update-integrity concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fred Cox |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.2.3 | — | — |
symfony/framework-bundle Version ^5.4.2 || ^6.0.2 | — | — |
sensio/framework-extra-bundle Version ^5.6.1 || 6.2.6 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.