thomasvargiu/laminas-twb-bundle
The repository includes a clear MIT license, tests, dependency tooling, and a matching source tree. All four workflow actions are unpinned, and no security policy is provided, so maintenance and build hygiene remain concerns.
58%
Total Score
50
88
50
Health Score Breakdown
The package has 16 releases, but none in the last 12 months; its latest release was about 20 months ago, indicating slowed maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance.
No repository security policy was found, leaving vulnerability-reporting expectations undocumented.
The assessed release is 5.0.0-beta1, a prerelease, so it carries more compatibility uncertainty than a stable release.
The single workflow was fully analyzed with no untrusted triggers, injection findings, or audit findings, but all 4 action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Neilime |
| Thomas Vargiu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laminas/laminas-mvc Version ^2.3 || ^3.0 | — | — |
laminas/laminas-form Version ^2.3 || ^3.0 | — | — |
laminas/laminas-i18n Version ^2.3 | — | — |
laminas/laminas-view Version ^2.3 | — | — |
laminas/laminas-stdlib Version ^2.3 || ^3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.