webeweb/core-bundle

The stable version, documentation, tests, and license provide useful consumer safeguards. However, absent security scanning and unpinned workflow actions add maintenance and build-reproducibility concerns, while the single publisher and inactive commits limit visible support.

Latest v3.28.0

Packagist

15%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk for a dependency because future maintenance is explicitly disclaimed.

Release history

The package has 130 releases since November 2018, but none in the last 12 months and the latest release was in December 2023. The long release gap is consistent with the package's abandoned status.

Repository archived

The linked source repository is archived, so it is no longer an actively maintained development home even though it was pushed recently. Archived status substantially raises abandonment and support risk.

Maintainers

Only one registry account has publish access, and the repository is owned by an individual account rather than an organization. This leaves a thin visible publishing and ownership base, though it is secondary to the archived repository.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. This provides no evidence of ongoing maintenance capacity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

webeweb

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.0\|^2.0\|^3.0	—	—
twig/twig Version ^2.10\|^3.0	—	—
doctrine/orm Version ^2.5.13	—	—
symfony/form Version ^4.4\|^5.0\|^6.0\|^7.0	—	—
symfony/asset Version ^4.4\|^5.0\|^6.0\|^7.0	—	—