tourze/product-comment-bundle
The broad dependency footprint and lack of security tooling add maintenance overhead. Strong documentation, tests, licensing, and a matching repository help, but the single release and roughly nine months without commits leave its future maintenance uncertain.
55%
Total Score
50
50
83
50
Health Score Breakdown
The package declares 43 runtime dependencies, creating substantial upgrade and compatibility maintenance overhead for a first release.
Only one release exists, published roughly ten months ago, so there is little evidence of an established release process or sustained maintenance.
The repository recorded no commits and no active maintainers in the last three months; its last push was roughly nine months ago, which raises abandonment risk.
Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful quality and vulnerability-detection gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/form Version ^7.3 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.