rezzza/security-bundle
The README, tests, and release notes make the integration understandable, and the package has no install-time scripts. Release activity has stopped since September 2017, while repository commits are also inactive; plan for an aging Symfony dependency.
58%
Total Score
50
100
81
50
Health Score Breakdown
The package has 11 releases but none in the last 12 months, with the latest release on September 6, 2017. This is a substantial maintenance and compatibility concern for a framework integration.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old registry release, this indicates limited ongoing maintenance capacity.
Composer is used as the build tool, which fits the package ecosystem, but no security-scanning tooling was detected. This is a modest transparency and hygiene gap rather than evidence of abandonment by itself.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package that handles request-signature security features.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Community contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/common Version ~2.2 | — | — |
symfony/security-bundle Version ~2.6|~3.0 | — | — |
symfony/framework-bundle Version ~2.6|~3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.