th3mouk/audit-trail-bundle
This is a promising but very young package rather than a mature dependency. The repository is actively maintained, matches the package, includes tests, changelog, CI, security policy, Dependabot, and read-only workflow permissions, while the package is licensed, not deprecated, and has no install-time scripts. However, the release history is only 22 days old with two releases, the version remains pre-1.0, and all recent repository commits come from one contributor; these factors create meaningful maturity, continuity, and bus-factor risk. It is reasonable to evaluate for adoption with appropriate version pinning and review, but it does not yet have the track record of a low-risk foundational dependency.
68%
Total Score
60
100
83
100
Health Score Breakdown
Only one account has registry publish access. That alone is not decisive, but it provides limited publishing redundancy for this user-owned project.
The repository is owned by an individual user rather than an organization, so there is no demonstrated organizational maintenance handoff or backing.
The package is only 22 days old and has two releases, with a median interval of about 22 days. This is insufficient history to establish long-term maintenance reliability.
One contributor made 100% of the two recent commits, creating a concentrated bus factor. The repository is user-owned, so no organization backing is shown to compensate for this concentration.
There were two commits in the last three months from one active maintainer. Recent activity is present, but the low volume and narrow contributor base weaken confidence in sustained maintenance.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jérémy Marodon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
symfony/uid Version ^7.4 || ^8.0 | — | — |
doctrine/orm Version ^3.2 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 18 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.