waaz/schema-bundle

The small project has limited visible adoption and security process, while its organization backing and recent release provide some confidence. Pin this version deliberately because releases are infrequent and the repository has no automated security scanning.

Latest 1.1

Packagist

66%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry publishing account is listed, which is a narrow publishing base, but the repository is owned by an organization, making this less concerning than a lone unbacked maintainer.

Release history

Only two releases have appeared since March 2024, with a median interval of about 2.6 years; the release published today is positive but does not establish a strong cadence.

Repo popularity

The repository has 1 star, 0 forks, and 2 watchers, indicating very limited visible adoption; popularity is supporting evidence, so this is a modest concern rather than a verdict.

Repo tooling

Composer is used for builds, but no security scanning tools are configured, leaving a meaningful security-process gap.

Security policy

The repository has no published security policy, reducing transparency about vulnerability reporting and response.