Package Health/softspring/account-bundle

softspring/account-bundle

It has clear licensing, a readable package, and a documented release process. Organization backing, repository security tooling, and read-only workflow permissions provide useful safeguards, though the maintenance base remains thin.

Latest v5.5.13

Packagist

72%

Total Score

Maintainer Stability

Dependencies

Maturity

100

Supply Chain

Health Score Breakdown

Dependency profile

The package has 20 runtime dependencies, including several framework and Softspring components. That is a meaningful integration surface and adds upkeep exposure, but it is consistent with a Symfony account-management bundle.

Repo bus factor

One contributor made all commits in the last three months, concentrating recent maintenance in a single person. Organization ownership provides some handoff capacity, but does not remove the observed concentration.

Repo commit activity

Only one commit was recorded in the last three months. Recent releases and a recent repository push provide some counterevidence, but the observed development activity is still sparse.

Workflow audit

Both workflows were analyzed successfully, use read-only permissions, and have no reported audit findings. All 7 action references are unpinned, however, leaving the workflow exposed to mutable upstream action changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
doctrine/orm Version ^2.10 \| ^3.0	—	—
symfony/form Version ^5.4\|^6.0\|^7.0	—	—
symfony/yaml Version ^5.4\|^6.0\|^7.0	—	—
symfony/config Version ^5.4\|^6.0\|^7.0	—	—
symfony/console Version ^5.4\|^6.0\|^7.0	—	—