Package Health/skilla/base-development-bundle

skilla/base-development-bundle

Its small dependency footprint, clear MIT licensing, and included tests make the template straightforward to inspect. The long inactivity means compatibility and maintenance help are unlikely, while install-time scripts add some operational friction.

Latest 1.0.8

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on November 27, 2016, with no releases in the last 12 months. That is strong evidence of abandonment, although the package is a stable template rather than an actively changing application library.

Repo commit activity

There were no commits and no active maintainers in the last three months, consistent with the repository having been untouched since 2017. This materially increases abandonment and compatibility risk.

Lifecycle scripts

The package defines post-install and post-update Composer scripts, so installation can execute package-controlled actions. This is a modest operational concern even though the signal does not show what those scripts do.

Project backing

The repository is owned by an individual user rather than an organization. This is neutral by itself, but it provides no organizational backing to compensate for the lack of recent activity.

Repo tooling

The repository uses Composer, showing basic build tooling, but has no security-scanning tools. For a small Symfony bundle template this is a minor transparency gap rather than a decisive risk.