tourze/biz-role-bundle
The package has clear documentation, a license, and broad automated tests, while the repository is active rather than archived. Its dependency set is large, security scanning is absent, and all six workflow actions are unpinned, leaving meaningful maintenance and build-reproducibility concerns.
62%
Total Score
50
83
50
Health Score Breakdown
The package declares 33 runtime dependencies, including many framework and companion packages; this increases upgrade and transitive-maintenance exposure for consumers.
The package has three releases, all within roughly 11 days, followed by a long period without a newer release; this suggests limited demonstrated maintenance despite a recent initial cadence.
The repository has zero stars and forks and one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little external evidence of maturity.
Composer build tooling is present, but no security scanning tool is configured, leaving a repository hygiene gap for a package with many runtime dependencies.
The repository has no security policy, which reduces transparency about vulnerability reporting and maintenance response.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
nesbot/carbon Version ^2.72 || ^3 | — | — |
symfony/config Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.