Bundle provides integration layer which is necessary to make MJR to be security aware.
64%
Total Score
caution
Usable with caveats: no release activity since April 2025 and no security tooling.
The package has 15 releases over more than 10 years, but none in the last 12 months; the latest release was about 17 months ago. This indicates a meaningful maintenance slowdown despite a historically regular 47-day median interval.
The repository had zero commits and zero active maintainers in the last 3 months, consistent with the long pause since the latest release. This raises abandonment risk for a security-related integration.
Composer is used for builds, but no security scanning tools were detected. That leaves a notable maintenance and vulnerability-detection gap for this kind of package.
The repository has no security policy. This weakens transparency around vulnerability reporting and response, particularly for a bundle focused on authentication and authorization.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.5 | — | — |
modera/expander-bundle Version ^5.0 | — | — |
modera/security-bundle Version ^5.0 | — | — |
modera/foundation-bundle Version ^5.0 | — | — |
modera/mjr-integration-bundle Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.