rich-id/maintenance-bundle
Clear licensing, tests, documentation, and organization backing support adoption. The main concerns are no registry releases for over two years, no recent commit activity, absent security scanning and policy, and unpinned workflow actions.
63%
Total Score
75
83
50
Health Score Breakdown
Composer post-install and post-update scripts add installation-time behavior that consumers must account for, though this is not by itself evidence of abandonment.
The package has six releases since July 2021, but none in the last 12 months and the latest registry release was over two years ago, indicating slowing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which weakens confidence in ongoing maintenance despite the recent push timestamp.
Composer build tooling is present, but no security-scanning tools were detected, leaving a repository hygiene gap for a package with install-time scripts.
The repository has no security policy, making vulnerability reporting and disclosure expectations unclear for adopters.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 RichId |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2.0 || ^3.0 | — | — |
symfony/form Version ^6.0 || ^7.0 | — | — |
symfony/routing Version ^6.0 || ^7.0 | — | — |
symfony/translation Version ^6.0 || ^7.0 | — | — |
symfony/twig-bundle Version ^6.0 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.