Package Health

stephpy/timelinebundle

The project has tests, a license, and a documented GitHub release, but recent maintenance is absent and repository security tooling is limited. The package remains a liability for new dependencies.

Latest v4.0.0PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

69

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package abandoned, with no distinct replacement supplied; this is a severe warning for ongoing maintenance and dependency safety.

Release historycaution

The package has a long history and 25 releases, but it has had no releases in the last 12 months, indicating stalled maintenance despite its established age.

Repo commit activitycaution

The linked repository recorded 0 commits and 0 active maintainers in the last 3 months, leaving current maintenance capacity unproven.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the repository linkage is less transparent than expected.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a modest repository hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Community contributors

Direct Dependencies

DependencyLast ReleaseScore
stephpy/timeline
Version ^2.0
—
—
symfony/framework-bundle
Version ^5.0|^6.0
—
—
symfony/options-resolver
Version ^5.0|^6.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
14 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform