ydle/hub-bundle

The package has a license, tests, and no install-time scripts. Its last release was over 11 years ago, repository commits have stopped, and the linked repository does not identify this package in its README.

Latest 0.5.92

Packagist

32%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was on January 29, 2015, with no releases in the last 12 months. This long period without updates is a strong abandonment concern for a dependency.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Combined with the old release date, this indicates the project is no longer actively maintained.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and one issue remains open. This supports the broader picture of an inactive project.

Repo package mention

The repository name does not match the package name and its README does not mention the package. That raises uncertainty about whether the linked source actually corresponds to this release.

Repo tooling

Composer is used for builds, but no security-scanning tooling is present. This is a modest transparency gap rather than a severe risk by itself.