murdej/php-svg-bundler

The package is small and easy to inspect, with a license, tests, and one runtime extension dependency. Its source has no security policy or scanning, so future maintenance and vulnerability response would be limited.

Latest 1.0.1

Packagist

52%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, both within minutes of each other, followed by about 19 months without a release. That is a meaningful maintenance concern for a dependency.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since its last push and increasing abandonment risk.

Repo issue activity

There were no new or closed issues or pull requests in the last month. With no other recent development activity, this provides little evidence of active support.

Repo package mention

The repository name does not match the package name and its README does not mention the package. That weakens confidence that the linked source repository is specifically maintained for this package.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. That leaves automated vulnerability detection as a gap for this dependency.