netgen/site-bundle

Security documentation is missing, and the repository has no commits from any maintainer in the last three months. The organization-backed project remains licensed, regularly released, and recently published, but unpinned workflow images add build-integrity risk.

Latest 4.0.2

Packagist

63%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The bundle declares 19 runtime dependencies, including Ibexa, Symfony, Doctrine, and several Netgen packages. This is a substantial integration surface, so compatibility maintenance matters, but the profile is coherent for an Ibexa site bundle.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last three months, despite a release during the assessed period. That weakens confidence in ongoing maintenance and may indicate release-only activity.

Repo issue activity

There are no open issues, four open pull requests, and one merged pull request in the last month. The limited activity is not a severe concern, but it provides only modest evidence of active collaboration.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. For a dependency with 19 runtime dependencies, this leaves a meaningful security-process gap.

Security policy

The repository has no security policy. This reduces transparency about vulnerability reporting and response expectations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Netgen

Direct Dependencies

Dependency	Last Release	Score
ibexa/core Version ^5.0.10	—	—
doctrine/orm Version ^2.20	—	—
symfony/mailer Version ^7.3	—	—
netgen/tagsbundle Version ^6.0	—	—
ibexa/content-forms Version ^5.0	—	—