vaszev/handy-bundle

The package has clear licensing, a usable README, and no install-time scripts. Its dependency set is sizeable, while the very small project shows limited adoption and no recent development, so future fixes are uncertain.

Latest 0.1.17

Packagist

55%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

The package declares 12 runtime dependencies, including several PHP extensions and image, Redis, and Symfony components. This increases integration and maintenance surface, though the profile is explicit rather than opaque.

Release history

The package has 38 releases since February 2019, but none in the last 12 months; the latest release was in January 2025, about 20 months ago. This suggests maintenance has stopped rather than merely slowed.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. That weakens confidence that defects or compatibility changes will be addressed promptly.

Repo popularity

The repository has 1 star, 0 forks, and 1 watcher, indicating very limited external adoption. Popularity is supporting evidence, but this adds little evidence of community resilience.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. The missing scanning is a modest transparency and maintenance gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Roland Bodnar

Direct Dependencies

Dependency	Last Release	Score
symfony/intl Version ^4.0	—	—
glooby/pexels Version ^0.1.3	—	—
gregwar/image Version v2.*	—	—
predis/predis Version ^1.1	—	—
ps/image-optimizer Version ^1.2	—	—