psx/api-bundle
Usable with caveats: the package is licensed, documented, tested, and backed by an active repository with sensible tooling. However, it has had no release or commit activity for about one year, and the repository lacks a security policy and explicit workflow token permissions.
62%
Total Score
67
50
88
80
Health Score Breakdown
The repository recorded zero commits and zero active maintainers over the last three months, consistent with the roughly one-year release gap and raising maintenance risk.
Six runtime dependencies are declared, including related PSX components and Symfony, which is a meaningful dependency surface but is coherent with the bundle's stated API-building role.
Only three releases exist and there have been no releases in the last 12 months, indicating a slow or stalled release cadence for a relatively young package.
The repository has no security policy, leaving vulnerability-reporting and response expectations unclear for a package intended to handle web APIs.
The CI workflow does not declare top-level token permissions, reducing transparency about least-privilege settings even though no write permissions were observed.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christoph Kappestein |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psx/api Version ^7.2 | — | — |
psx/sql Version ^4.1 | — | — |
psx/data Version ^7.0 | — | — |
psx/schema Version ^7.2 | — | — |
symfony/framework-bundle Version ^6.4|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.