Package Health

sensiolabs/minify-bundle

This is a healthy, transparently maintained release with an MIT license, stable v1.3.1 versioning, a matching repository, documented releases, repository tests, and current repository activity. The organization backing and recent merged pull requests provide meaningful maintenance support, while the main concerns are that only one contributor made commits in the last three months, release activity has slowed to two releases in the last 12 months, and no security policy is published. The package appears reasonable to depend on, with normal dependency and build hygiene, but its recent commit bus factor warrants monitoring.

Latest v1.3.1PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

80

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Release historycaution

Eleven releases over 692 days and two releases in the last 12 months show an established project, although the recent cadence is slower than its historical median interval of about 16 days.

Repo bus factorcaution

One contributor made all commits in the last three months, creating a concentrated short-term commit bus factor; organization ownership partly compensates because maintenance can potentially be handed off.

Repo commit activitycaution

Only one commit was recorded in the last three months, which is thin direct maintenance activity even though six pull requests were merged in the last month.

Security policycaution

No repository security policy was found, leaving vulnerability reporting guidance less transparent than ideal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Simon André
SensioLabs

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^2|^3
—
—
symfony/process
Version ^6.4|^7.0|^8.0
—
—
symfony/filesystem
Version ^6.4|^7.0|^8.0
—
—
symfony/http-client-contracts
Version ^3.5
—
—

Weekly Downloads

Info

Last Published
20 days ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform