ydle/user-bundle

The license, tests, and minimal dependency surface are clear, but the project lacks a security policy and has no meaningful adoption. Its source and registry records provide too little recent maintenance evidence for a new dependency.

Latest 0.5.3

Packagist

10%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement supplied. This is a direct warning against taking a new dependency on it.

Release history

The latest release was published in January 2015, and there have been no releases in the past 11 years. That strongly indicates abandonment for a package intended to be maintained over time.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the past three months, consistent with its last push in January 2015. This leaves no evidence of current maintenance capacity.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Although this can occur with subpackages, it reduces confidence that the linked source is specifically documented for this release.

Security policy

The linked repository has no security policy. For an abandoned package this adds to the lack of transparency about how vulnerabilities would be handled.