Package Health

utafitilabs/pdf-scribe-bundle

The package includes tests, documentation, a changelog, and a matching source repository backed by an organization. Its workflow uses read-only permissions but leaves all three actions unpinned, and the project has no security scanning or established activity yet.

Latest v0.1.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This is the first release, published today, so there is no release cadence or track record to demonstrate sustained maintenance. That is expected for a new package but lowers maturity confidence.

Repo commit activitycaution

There were no commits in the last three months and no active maintainers in that period. Because the package was only released today, this is mainly missing history rather than evidence of abandonment, but it limits confidence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning is a modest repository hygiene gap, partly offset by the available tests and static configuration shown in the file tree.

Security policycaution

The repository has no security policy. For a new package this is a transparency gap, though it is not severe enough to make the release unfit on its own.

Version stabilitycaution

Version 0.1.0 is an early, non-stable-major release, which signals that APIs and behavior may still change. It is not marked as a prerelease, so the concern is limited to maturity and compatibility expectations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ezekiel Mjema

Direct Dependencies

DependencyLast ReleaseScore
symfony/config
Version ^7.3 || ^8.0
—
—
symfony/process
Version ^7.3 || ^8.0
—
—
symfony/http-kernel
Version ^7.3 || ^8.0
—
—
symfony/dependency-injection
Version ^7.3 || ^8.0
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform