whatwedo/search-bundle

The source project remains maintained enough to provide tests, documentation, and a matching organization-owned repository. Its MIT licensing and lack of install scripts reduce adoption friction, but the package should be replaced rather than newly adopted.

Latest v2.3.1

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned and names araise/search-bundle as its replacement. This is a substantial adoption risk even though the release itself is not individually withdrawn.

Release history

The latest registry release was on August 19, 2022, with no releases in the last 12 months. That long release gap raises abandonment and compatibility risk.

Repo commit activity

The repository had no commits and no active maintainers in the last 3 months, which conflicts with the repository's recent push metadata and provides little evidence of ongoing development.

Repo tooling

The repository uses Make and Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than a standalone adoption blocker.

Security policy

No security policy was found in the linked repository, leaving vulnerability-reporting expectations unclear. This is a transparency weakness, not evidence of malicious behavior.