Package Health

se7enxweb/ez-core-extra-bundle

Tests, documentation, and licensing are in place, while the repository is not archived. A single publisher, no recent commits, and no security scanning leave limited evidence of ongoing maintenance.

Latest v4.0.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Maintainerscaution

Only one registry publishing account is listed, and the repository is user-owned rather than organization-backed; this leaves a thin visible maintainer base.

Release historycaution

The package published 33 releases in about 2 days, with no later releases across the remaining package lifetime; this concentrated burst gives limited evidence of sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which is meaningful evidence of slowed maintenance for a library dependency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and maintenance gap rather than a severe risk.

Version stabilitycaution

The latest recorded version is v3.0.2 while the assessed release is v4.0.0, although the release is marked stable and has no recent prereleases; the version metadata is therefore somewhat inconsistent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Jerome Vieilledent

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.0
—
—
ibexa/core
Version ^4.0
—
—
symfony/config
Version ^5.4
—
—
symfony/http-kernel
Version ^5.4
—
—
symfony/security-core
Version ^5.4
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform