Package Health

tourze/gitee-api-bundle

Clear documentation, tests, licensing, and a matching repository support adoption. The source is active and not archived, but the release is immature and workflow dependencies are not pinned; security oversight is limited.

Latest 0.0.1PackagistPackagist

61%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Project backingcaution

The package and repository are owned by the same individual account, so the source appears aligned with the published package. There is no organization backing shown to provide broader continuity.

Release historycaution

This is the only release, published 473 days ago, with no releases in the last 12 months. That indicates limited release maturity, although the linked repository was pushed more recently.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a bundle handling OAuth integrations, that is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a hygiene concern rather than evidence that the package is unsafe.

Version stabilitycaution

Version 0.0.1 is not a stable major release, so its API and behavior may still change. It is not marked as a prerelease, which provides a small compensating signal.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
doctrine/orm
Version ^3.0
symfony/yaml
Version ^6.4 || ^7.1
doctrine/dbal
Version ^4.0
symfony/config
Version ^6.4
symfony/console
Version ^6.4

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform