se7enxweb/liip-imagine-bundle
The registry has published no release in the last 12 months, and the linked repository neither matches the package name nor mentions it. All workflow action references are unpinned, while the package otherwise has a clear MIT license, documentation, tests in the repository, and an active-looking source tree.
48%
Total Score
50
86
75
Health Score Breakdown
The package is 394 days old with 93 releases but no releases in the last 12 months, indicating that registry publishing has stopped despite the stable version.
The repository recorded zero commits and zero active maintainers in the last 3 months, providing little evidence of ongoing maintenance.
The repository name does not match the package and its README does not mention the package, so the source relationship is not convincingly established.
All 11 analyzed action references are unpinned, weakening build reproducibility and increasing exposure to changes in upstream actions; the audit otherwise found no dangerous triggers or high-severity findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Liip and other contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^1.44|^2.9|^3.0 | — | — |
symfony/mime Version ^4.4|^5.3|^6.0|^7.0 | — | — |
symfony/finder Version ^3.4|^4.4|^5.3|^6.0|^7.0 | — | — |
imagine/imagine Version ^1.3.2 | — | — |
symfony/process Version ^3.4|^4.4|^5.3|^6.0|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.