zenstruck/media-bundle
It includes a README, tests, release notes, and an MIT license, with no install-time scripts. The package is not a sound foundation for a new dependency because its source and registry status show no active maintenance.
10%
Total Score
0
100
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement package supplied. Package-level deprecation is a severe adoption risk rather than a cosmetic metadata gap.
The latest release was published on April 24, 2014, with no releases in the last 12 months. This long release gap strongly indicates abandonment for a package intended to integrate with a framework.
The repository recorded zero commits and zero active maintainers in the last three months. This is consistent with the archived and abandoned status, leaving no evidence of current maintenance capacity.
The linked repository is archived, which indicates the project is no longer maintained for ongoing dependency use. Its last recorded push was on November 23, 2022, and the archived state outweighs the available documentation.
Composer is used as a build tool, but no security scanning tools are present. The lack of scanning is a minor hygiene gap, not the primary reason this release is unfit.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kevin Bond |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 jms/serializer Version ~0.11 | — | — |
symfony/symfony Version ~2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.