Service Bus Bundle
12%
Total Score
critical
Unfit to use: Packagist marks the package as abandoned.
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe warning against taking a new dependency on the package.
The package has had no release for about 10 years and no releases in the last 12 months; all three releases arrived within roughly two days in August 2016. This strongly indicates abandonment.
The bundle declares four runtime dependencies, including the related service-bus package and Symfony components. That dependency surface is not inherently excessive, but it increases the maintenance burden for a package that has been inactive for years.
Version 0.2.2 is not a prerelease, but it remains below a stable 1.0 major version and has not progressed since 2016. The lack of subsequent releases reinforces the maturity concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/config Version ^2.6|^3.0 | — | — |
symfony/http-kernel Version ^2.6|^3.0 | — | — |
skolodyazhnyy/service-bus Version ^0.2.2 | — | — |
symfony/dependency-injection Version ^2.6|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.