whatwedo/core-bundle
The repository is organization-backed and recently updated, with tests, a changelog, and security scanning. Maintenance is concentrated in one contributor, and the package remains pre-1.0.
38%
Total Score
83
75
75
Health Score Breakdown
Packagist marks the entire package abandoned and identifies araise/core-bundle as the replacement. This is a direct warning against starting a new dependency on this package.
The package has 11 releases since January 2017, but its latest registry release was in March 2023 and there were no releases in the last 12 months. That weakens confidence in ongoing release maintenance.
All five recent commits came from one contributor, leaving maintenance capacity concentrated in a single person. Organization backing provides some handoff potential but does not eliminate this weakness.
The repository has no published security policy. That is a transparency gap for reporting and handling vulnerabilities.
Version v0.5.0 is not a stable major release, so its API may still change. This adds compatibility risk alongside the package's abandoned status.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ueli Banholzer |
| Felix Imobersteg |
| Nicolo Singer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/intl Version ~4.0|~5.0 | — | — |
symfony/console Version ~4.0|~5.0 | — | — |
symfony/http-kernel Version ~4.0|~5.0 | — | — |
doctrine/collections Version ~1.0 | — | — |
symfony/framework-bundle Version ~4.0|~5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.