sidus/base-serializer-bundle
The MIT license and small dependency set make the package straightforward to integrate. It has no install scripts, but no security policy or security scanning was found, and the source repository has no tests.
43%
Total Score
100
57
75
Health Score Breakdown
The latest release was published in January 2020, with no releases in the following six years. That long period without updates is strong evidence of abandonment risk.
The repository name does not match the package name and its README does not mention the package. That makes the repository-to-package ownership link unclear and raises provenance concerns.
Composer is used as the build tool, but no security scanning tooling is present. For a reusable serializer bundle, that is a maintenance and transparency gap.
The linked repository is not archived, but its last push was in January 2020, consistent with the prolonged lack of releases.
The source repository has no security policy. This weakens the project's disclosure and response transparency, although it is not evidence that the package is malicious.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Vincent Chalnot |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sidus/base-bundle Version ~1.0 | — | — |
symfony/serializer Version >2.4,<5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.