Package Health

tourze/lottery-bundle

The package includes tests, a usable README, an MIT license, and a matching source repository. Its large dependency surface and unpinned workflow actions add maintenance and build-integrity concerns.

Latest 0.0.2PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Dependency profilecaution

The package declares 61 runtime dependencies, including a broad Symfony, Doctrine, and Tourze stack. This increases upgrade and transitive-risk burden for consumers compared with a narrowly scoped package.

Project backingcaution

The package and repository share the tourze namespace, but the repository owner is an individual account rather than an organization. This provides a clear ownership match but limited visible backing capacity.

Release historycaution

Only two releases were published, both within about 10 hours, and there have been no releases in the last 12 months despite the package being about 16 months old. This indicates limited release maturity and uncertain ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers during the last three months. Combined with no registry releases in the last year, this is a meaningful sign of stalled maintenance.

Repo issue activitycaution

There are no open issues or pull requests and no issue or pull-request activity in the last month. This is neutral for a small project, but it offers little evidence of an active maintenance community.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
psr/log
Version ^3|^2|^1
—
—
doctrine/orm
Version ^3.0
—
—
symfony/yaml
Version ^6.4 || ^7.1
—
—
doctrine/dbal
Version ^4.0
—
—
nesbot/carbon
Version ^2.72 || ^3
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform