Package Health

robtec20/create-bundle

It has an MIT license, tests, a changelog, and no install-time scripts. However, no commits or releases have appeared since June 2017, so fixes and compatibility work are unlikely.

Latest 1.3.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

0

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historydanger

The package is about 9 years old, but it has had no releases in the last 12 months and its latest release was in June 2017. This is strong evidence of abandonment despite 25 historical releases.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, providing no evidence of ongoing maintenance to offset the old release history.

Repo popularitycaution

The repository has 0 stars and 0 forks, with only 1 watcher. Popularity is supporting evidence rather than decisive, but these figures provide little additional confidence in long-term support.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. This is a modest hygiene gap and does not outweigh the more serious maintenance concerns.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response practices undocumented. This adds a transparency gap to the already stale maintenance picture.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Liip AG
Symfony CMF Community

Direct Dependencies

DependencyLast ReleaseScore
midgard/createphp
Version ^1.1
symfony/assetic-bundle
Version ^2.1
symfony/framework-bundle
Version ^2.3
friendsofsymfony/rest-bundle
Version ^1.0

Weekly Downloads

Info

Last Published
10 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform