Package Health

symfgenus/money-bundle

This is a Symfony bundle that integrates moneyphp/money library (Fowler pattern): https://github.com/moneyphp/money.

Latest v4.1.0PackagistPackagist

36%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

64

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned and gives no meaningful replacement beyond the same package name. This is a major warning for a dependency despite the repository still being unarchived.

Release historydanger

The package has 32 releases since July 2013, but its latest release was in November 2021 and it had no releases in the last 12 months. That indicates a long period without published maintenance.

Project backingcaution

The source repository is owned by an individual user rather than an organization, so there is no observed organizational backing to offset the package's maintenance concerns.

Repo commit activitycaution

The linked repository recorded zero commits and zero active maintainers in the last 3 months. The repository was pushed in December 2023, but the current activity still shows no ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were found. The absence of scanning is a modest transparency gap rather than evidence of unsafe code.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Philippe Le Van
Sebastien Lefebvre

Direct Dependencies

DependencyLast ReleaseScore
symfony/form
Version ^3.4|^4.0|^5.0
—
—
moneyphp/money
Version ^3.0
—
—
symfony/console
Version ^3.4|^4.0|^5.0
—
—
symfony/dom-crawler
Version ^3.4|^4.0|^5.0
—
—
symfony/twig-bundle
Version ^3.4|^4.0|^5.0
—
—

Weekly Downloads

Info

Last Published
4 years ago
Created
13 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform