tourze/rss-feed-collect-bundle
It has tests, a README, MIT licensing, and a matching repository. Workflow references are unpinned and the repository has no security policy, so transparency and build reproducibility are weaker.
58%
Total Score
50
50
71
83
Health Score Breakdown
The package declares 28 runtime dependencies for a feature-rich Symfony bundle, increasing maintenance and compatibility surface even though the breadth is plausible for this package type.
This is a young package with only one release, published 273 days ago, and no established release cadence. That leaves long-term maintenance uncertain.
No commits and no active maintainers were recorded in the last three months. For a package with only one release, this is meaningful evidence of uncertain ongoing maintenance.
The repository name matches the package, which supports the link, but the package name is not mentioned in its README. That leaves a small ownership and package-identity transparency gap.
Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and quality gap rather than evidence of abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3|^2|^1 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
symfony/config Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.