tourze/bundle-dependency

The package is easy to inspect, with a clear README, tests, a small runtime dependency set, and a valid MIT license. Its workflows have no dangerous audit findings, but stronger maintenance and build-pinning evidence would make adoption more comfortable.

Latest 1.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Project backing

The registry namespace and repository owner match, but the owner is an individual account rather than an organization, so there is no clear organizational backing to offset the thin activity evidence.

Release history

Three releases over about 18 months, with one release in the last 12 months and a median interval of about 111 days, show real publishing activity but a modest cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the repository not being archived.

Repo popularity

The repository has zero stars and forks and one watcher; popularity is only supporting evidence, but this provides little external adoption signal.

Repo tooling

Composer build tooling is present, but no security-scanning tool was detected. This is a hygiene gap rather than evidence that the package is unsafe.