Package Health

meniam/core-bundle

The MIT declaration and substantial source tree provide useful baseline transparency, while 45 runtime dependencies increase upgrade and compatibility burden. The registry and repository show no release or commit activity for nearly seven years, making abandonment the main adoption risk.

Latest v2.0.5PackagistPackagist

35%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

88

Health Score Breakdown

Release historydanger

The package has 56 releases but none in the last 12 months, with the latest release in December 2019; this is strong evidence that maintenance has stopped.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.

Dependency profilecaution

The package declares 45 runtime dependencies, including many framework and extension requirements, creating a substantial compatibility and maintenance burden for adopters.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package, leaving the package-to-source relationship less clearly documented than expected.

Repo toolingcaution

Composer build tooling is present, supporting reproducible project structure, but no security-scanning tooling was detected; this is a minor transparency gap rather than evidence of unsafe behavior.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Eugene Myazin

Direct Dependencies

DependencyLast ReleaseScore
sentry/sdk
Version ^2.0.0
—
—
symfony/form
Version ^4.4
—
—
symfony/lock
Version ^4.4
—
—
symfony/yaml
Version ^4.4
—
—
cocur/slugify
Version @stable
—
—

Weekly Downloads

Info

Last Published
6 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform