tomasvotruba/barcode-bundle
Its focused dependency set, tests, readable documentation, and matching repository make the package straightforward to inspect. The workflow uses unpinned actions and the repository lacks a security policy, so future maintenance deserves attention.
58%
Total Score
50
100
88
75
Health Score Breakdown
The latest release was published on January 5, 2024, with no releases in the following 12 months; by collection this leaves the package without a release for over two years.
The repository recorded zero commits and zero active maintainers during the last three months, reinforcing the broader evidence that maintenance has stalled.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest process gap for dependency and build assurance.
The repository has no security policy, reducing transparency about vulnerability reporting and maintainer response expectations.
The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and action supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/http-kernel Version ^6.0 || ^7.0 | — | — |
symfony/dependency-injection Version ^6.0 || ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.