Package Health

mopa/bootstrap-bundle

Usable with caveats: it has a long release history, a current stable release, a clear license, and repository tests. However, the repository shows no commits or active maintainers in the last three months, and the project lacks security scanning and a security policy.

Latest v3.6.1PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

63

Health Score Breakdown

Dependency profilecaution

Seven runtime dependencies create a meaningful compatibility surface for a Symfony bundle, but the profile is coherent with the package's stated framework integration role.

Lifecycle scriptscaution

The package runs post-install and post-update scripts, which increase installation complexity and execution surface compared with a package that has no lifecycle commands.

Project backingcaution

The repository is owned by an individual rather than an organization, so the project has less visible institutional backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, a significant sign of slowed maintenance and higher abandonment risk.

Repo issue activitycaution

There are open issues and pull requests, but none were opened, closed, or merged during the last month, indicating limited current interaction.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Philipp A. Mohrenweiser
Community contributions

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^2.9 || ^3.0
symfony/form
Version ^4.4 || ^5.1 || ^6.0 || ^7.0 || ^8.0
symfony/console
Version ^4.4 || ^5.1 || ^6.0 || ^7.0 || ^8.0
symfony/twig-bundle
Version ^4.4 || ^5.1 || ^6.0 || ^7.0 || ^8.0
mopa/composer-bridge
Version ^1.3

Weekly Downloads

Info

Last Published
7 days ago
Created
14 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform