mikoweb/vsymfo-core-bundle
The project has no security policy, and its README does not mention the package, reducing transparency. The license is clearly declared and the package has no install-time scripts.
8%
Total Score
0
30
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on it.
The package has 61 historical releases but none in the last 12 months; the latest release was about 7 years ago. Its earlier rapid release cadence does not offset the long period of inactivity.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with abandonment rather than ongoing maintenance.
The linked repository is archived and was last updated about 7 years ago, indicating the source is no longer maintained.
The repository name matches the package, but its README does not mention the package. This weakens package-to-source transparency, although the matching repository name is compensating evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rafał Mikołajun |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 liip/theme-bundle Version >=1.4.1 | — | — |
mikoweb/vsymfo-core Version ~1.0 | — | — |
mikoweb/vsymfo-document Version ~2.0 | — | — |
symfony/dependency-injection Version ~2.8|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.