sonata-project/news-bundle
Unfit to use for new projects: the package is marked abandoned and its source repository is archived, with no releases or commits for roughly five years. It has solid historical packaging, tests, and licensing, but those do not offset the lack of ongoing maintenance.
15%
Total Score
50
63
67
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement specified. This is a direct warning against taking a new dependency despite the package's otherwise established history.
The package has 32 releases and a long history, but it has had no release in roughly five years and none in the last 12 months. The historical cadence does not compensate for the prolonged release gap.
The repository recorded no commits and no active maintainers in the last three months, consistent with abandonment rather than active maintenance.
The linked source repository is archived and was last pushed in December 2021, so it is no longer maintained through that repository.
The repository has no security policy. This is a transparency gap, although the stronger abandonment signals are the primary reason this release is unfit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thomas Rabaix |
| Sonata Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^2.12.1 | — | — |
symfony/form Version ^4.4 | — | — |
symfony/mime Version ^4.4.10 || ^5.1 | — | — |
symfony/config Version ^4.4 | — | — |
symfony/mailer Version ^4.4 || ^5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.