Package Health/2performant/business-league-marketing

2performant/business-league-marketing

This is a usable, transparently packaged Magento 2 extension with a declared GPL-3.0-or-later license, stable releases, strong unit and integration test coverage, an unarchived organization-owned repository, and a recent release cadence. The main concern is maintenance continuity: the repository shows zero commits and zero active maintainers in the last 3 months despite a recent package release, while the project has no security scanning or security policy and has very limited public adoption. The package is therefore reasonable to evaluate and use with monitoring, but it does not provide the evidence of sustained maintenance expected for a highly healthy dependency.

Latest 1.1.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package uses post-install-cmd and post-update-cmd scripts, which add installation-time behavior and deserve review before adoption, but this is not by itself evidence of poor maintenance or unfitness.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a meaningful concern about maintenance continuity despite the recent registry release.

Repo popularity

The repository has 0 stars, 1 fork, and 0 watchers, indicating very limited public adoption. Popularity is supporting evidence rather than a decisive health criterion, so this is a caution rather than a severe risk.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The missing scanning coverage is a genuine supply-chain hygiene gap, though it is not a health verdict by itself.

Security policy

The repository has no security policy, reducing transparency around vulnerability reporting and response expectations for a package that processes checkout and tracking behavior.