Tests, a usable README, and organization backing provide some confidence for maintenance and integration. The missing license and security policy reduce transparency, while the long release and commit gap makes this a risky dependency.
42%
Total Score
50
100
63
83
The latest release was published over seven years ago, and there were no releases in the last 12 months. The package had 31 releases historically, but that earlier cadence does not offset the prolonged silence.
There were no commits and no active maintainers in the last three months. Combined with no registry releases for over seven years, this is strong evidence of inactive maintenance.
No declared license, license file, or repository license file was found. That leaves the legal terms for using this dependency unclear.
There are no new or closed issues in the last month and 21 open pull requests. The lack of recent issue resolution, together with the stale commits, points to weak project responsiveness.
The repository name does not exactly match the package name and its README does not mention the package. Because this is clearly presented as a bundle within the broader project, the mismatch is less concerning, but package identity is still not fully explicit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^3.8 | — | — |
aws/aws-sdk-php Version ^3.86 | — | — |
unite-cms/core-bundle Version 0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.