padam87/cron-bundle
Clear documentation, tests, licensing, and a stable non-deprecated release support adoption. The workflow uses unpinned actions and the project has no security policy, so pinning this version is preferable.
67%
Total Score
50
100
94
75
Health Score Breakdown
The repository is owned by an individual rather than an organization, so continuity depends more heavily on that maintainer's availability.
The repository recorded zero commits and zero active maintainers during the last three months. The recent release partly offsets this, but current development activity is still a maintenance concern.
Composer is used for the build, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.
The repository has no SECURITY.md or equivalent security policy. This weakens vulnerability-reporting transparency for a package that runs scheduled commands.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving avoidable dependency-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adam Prager |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^6.1 || ^7.0 || ^8.0 | — | — |
symfony/console Version ^6.1 || ^7.0 || ^8.0 | — | — |
symfony/process Version ^6.1 || ^7.0 || ^8.0 | — | — |
symfony/dependency-injection Version ^6.1 || ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.