ridji/blog-bundle

Release historydanger

The package has had no release in over nine years: all six releases were published in May 2017, with none in the last 12 months. This is strong evidence of abandonment for a framework integration package.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no observed current maintenance capacity.

Dependency profilecaution

The bundle declares 15 runtime dependencies, including Symfony2-era components and older ecosystem integrations. That broad, dated dependency surface creates substantial compatibility and upgrade risk.

Repo popularitycaution

The repository has only 1 star and 1 fork, providing little evidence of a broad support community. Popularity is supporting evidence, but this reinforces the maintenance concerns shown by the inactive release and commit history.

Security policycaution

The linked repository has no security policy, so there is no documented channel or process for handling vulnerabilities. This is a transparency and maintenance gap, though it is not evidence of a vulnerability itself.