tourze/cainiao-pickup-bundle
Its broad dependency set and four unpinned workflow actions add maintenance and build-reproducibility costs. A substantial README, tests, MIT licensing, and a matching repository provide useful support, but the project has little release history.
68%
Total Score
100
50
75
75
Health Score Breakdown
The package declares 35 runtime dependencies across Symfony, Doctrine, EasyAdmin, and related bundles. That breadth increases upgrade and compatibility burden for a small early release.
This package has one release in about 10 months, with no observed follow-up releases, so its maintenance track record is limited even though the repository was pushed more recently.
The repository has no stars or forks and only one watcher. This is supporting evidence of a small user base, but popularity alone does not establish poor health.
Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than a severe risk.
The repository has no security policy, leaving its vulnerability-reporting process undocumented.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/form Version ^7.3 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.