Package Health

pixelmairie/sulu-townhalljobofferbundle

The repository is active and the organization provides some handoff capacity, with a current release, README, changelog, and security tooling. Maintenance is thin and workflow dependencies are all unpinned; the missing security policy adds a smaller transparency gap.

Latest 1.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package is 650 days old with three releases, only one release in the last 12 months, and a median interval of about 316 days. The latest release was published recently, so this indicates slow rather than absent maintenance.

Repo bus factorcaution

All recent commits came from one contributor, giving the project a single-person operational dependency. Organization ownership provides some potential handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

There was one commit in the last three months from one active maintainer. Recent activity is positive, but the very low volume provides limited evidence of sustained maintenance.

Security policycaution

No repository security policy was found. This is a transparency gap, though security scanning tools provide some compensating process evidence.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, injection findings, or excessive top-level permissions. However, all four referenced actions are unpinned, leaving builds exposed to upstream action changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pixel Mairie

Direct Dependencies

DependencyLast ReleaseScore
sulu/sulu
Version ^2.6
—
—
pixelmairie/sulu-townhallbundle
Version ^3.0
—
—

Weekly Downloads

Info

Last Published
25 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform