phil/base-bundle
Its broad runtime dependency set increases the maintenance surface, and the registry reports a version mismatch. The repository lookup was inconclusive, so source activity and provenance could not be checked.
12%
Total Score
50
17
Health Score Breakdown
Packagist marks the entire package as abandoned and provides no replacement. Package-level deprecation is a severe adoption risk even when no specific reason is supplied.
The last release was 11 years ago, with no releases in the past 12 months, indicating severe abandonment risk. Six historical releases provide little compensation for the prolonged inactivity.
The bundle declares 12 runtime dependencies, including framework, frontend, and security tooling packages, which creates a substantial maintenance and compatibility surface. For a bundle package this breadth is expected, but it still increases adoption risk when maintenance has stopped.
The assessed version is 0.2.0, while the registry profile reports 0.1.4 as the latest version, creating release metadata uncertainty. It is not marked prerelease, but that does not resolve the mismatch.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Philippe Gamache |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phing/phing Version * | — | — |
psecio/iniscan Version ~3.4 | — | — |
components/jquery Version >=1.11.1,<1.12-dev | — | — |
nelmio/cors-bundle Version ~1.3 | — | — |
psecio/versionscan Version ~0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.