smokezp/easyadmin-bundle

The package has had no release or commit activity for over six years, and the linked repository does not name or mention it. Licensing, documentation, tests, and a security policy are present, but they do not offset the abandonment and identity concerns.

Latest v2.3.5

Packagist

43%

Total Score

Maintainer Stability

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has 130 releases but none in the last 12 months, and its latest release was over six years ago. That long gap is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the prolonged release inactivity. No newer activity is provided to compensate for this gap.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the source may not actually belong to this release. This weakens provenance confidence.

Repo tooling

The project uses Composer build tooling, which is appropriate for a Packagist package. No security scanning tools were detected, but that is a secondary hygiene gap compared with the inactivity evidence.

Workflow audit

The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but it uses an unpinned container image with high confidence. That is a supply-chain hygiene weakness, though not severe enough to determine the score alone.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Project Contributors

Direct Dependencies

Dependency	Last Release	Score
twig/twig Version ^2.11.3\|^3.0	—	—
doctrine/orm Version ^2.6.3	—	—
symfony/form Version ^4.2\|^5.0	—	—
symfony/asset Version ^4.2\|^5.0	—	—
symfony/cache Version ^4.2\|^5.0	—	—