Package Health/php-arsenal/symfony-request-param-bagger

php-arsenal/symfony-request-param-bagger

The package includes a README, tests, and a small dependency set, which keeps integration straightforward. Maintenance has stopped since July 2023, and all three workflow actions are unpinned; the project is not archived or deprecated.

Latest 0.5.5

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 3 years ago, with no releases in the past 12 months. The earlier median interval of about 53 days shows the project was previously active, but current maintenance is a concern.

Repo commit activity

The repository recorded no commits and no active maintainers in the past 3 months, consistent with the long gap since the last release. This indicates meaningful abandonment risk for a dependency.

Repo popularity

The repository has 1 star, 1 fork, and 1 watcher, providing little evidence of broad community review or support. This is supporting caution rather than a verdict because small packages can still be maintained.

Security policy

No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. For this small package that is a transparency gap, but it is not evidence of a security defect.

Workflow audit

All 3 analyzed action references are unpinned, weakening build reproducibility. The workflow audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, which partly offsets the hygiene gap.