symfony-bundle/highlight-bundle
The stable version and small runtime dependency set are straightforward, but they do not offset the package's weak evidence of continued care. Its registry history provides little basis for trusting it in a new project.
12%
Total Score
50
100
17
Health Score Breakdown
The package explicitly borrows the identity of the far more established symfony/phpunit-bridge, while its own download and release counts are zero and one respectively. This strongly suggests consumers may have wanted the other package.
The package has only one release, published nearly 12 years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency being considered today.
Only one account has registry publishing access, providing little visible continuity or contributor redundancy. This reinforces the abandonment concern, although registry access alone does not prove who actively maintains the package.
Version 1.0.0 is a stable release rather than a prerelease, which avoids prerelease uncertainty, but the stable label does not compensate for the nearly 12-year-old release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hassan AMOUHZI |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 pygments/pygments Version 1.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 11 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.