Package Health

remcosmitsdev/buildable-serializer-bundle

The package includes a substantial README, tests, a release note, and matching MIT licensing. Its single release and no commits in the last three months leave maintenance unproven; workflows also use seven unpinned actions.

Latest 1.0.0PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Project backingcaution

The package is maintained under a named individual account rather than an organization, so there is no demonstrated organizational continuity to offset the limited activity.

Release historycaution

This is a young package with one release, published 136 days ago, so there is not yet enough release history to demonstrate sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. For a package only 136 days old, this leaves ongoing maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanning is a modest transparency and maintenance concern rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving the process for reporting and handling vulnerabilities unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
symfony/yaml
Version ^6.4
—
—
symfony/config
Version ^6.4
—
—
symfony/finder
Version ^6.4
—
—
symfony/console
Version ^6.4
—
—
nikic/php-parser
Version ^5.7
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
4 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform