Package Health

utafitilabs/element-bundle

The package includes substantial documentation, tests, and a matching organization-owned repository. Its workflow uses three unpinned actions, and the project has not established security scanning or a security policy. Maintenance is still unproven because this is the first published release.

Latest v0.1.0PackagistPackagist

65%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historycaution

This is the first release, published 0 days ago, so there is no release cadence or history demonstrating sustained maintenance. Its very recent publication limits how strongly the absence of history should be penalized.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Because the repository and package were created only today, this is mainly a lack of evidence for ongoing maintenance rather than evidence of abandonment.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a transparency and maintenance gap, though it does not by itself make the release unfit.

Version stabilitycaution

Version v0.1.0 is an early, non-stable-major release, which signals API and maintenance maturity are not yet established. It is not marked as a prerelease, providing a small counterweight.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, all 3 of its 3 action references are unpinned, leaving the build exposed to reference changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ezekiel Mjema

Direct Dependencies

DependencyLast ReleaseScore
twig/twig
Version ^3.12
—
—
symfony/asset
Version ^7.3 || ^8.0
—
—
symfony/config
Version ^7.3 || ^8.0
—
—
symfony/http-kernel
Version ^7.3 || ^8.0
—
—
symfony/twig-bundle
Version ^7.3 || ^8.0
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform