Package Health

yannickl88/features-bundle

The package has a matching repository, a clear MIT license, a useful README, and tests in the source project. Its release and commit activity is now quiet, and workflow dependencies are unpinned.

Latest 2.3.0PackagistPackagist

60%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has 12 releases since January 2016, but none in the last 12 months; the latest release was about 2 years and 3 months ago. This indicates a meaningful maintenance slowdown for a framework bundle.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. Combined with no releases in the last year, this is evidence of limited current maintenance.

Repo toolingcaution

The repository uses Composer, but no security scanning tool was detected. This is a modest transparency and maintenance-process gap, not evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a reusable Symfony bundle this leaves vulnerability reporting expectations unclear, creating a minor transparency concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the release unfit.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Yannick de Lange

Direct Dependencies

DependencyLast ReleaseScore
symfony/config
Version ^5.4||^6.0
—
—
symfony/finder
Version ^5.4||^6.0
—
—
symfony/http-kernel
Version ^5.4||^6.0
—
—
symfony/framework-bundle
Version ^5.4||^6.0
—
—
symfony/dependency-injection
Version ^5.4||^6.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform