Package Health

3neti/x-commerce

Substantial documentation, tests, and a clear MIT declaration support adoption. Its main limitation is reliance on one maintainer, with no security policy or scanning and unpinned workflow actions.

Latest v1.4.4PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Project backingcaution

The repository is owned by a personal GitHub account rather than an organization, so the concentrated contributor activity is not visibly backed by an organizational maintenance pool.

Release historycaution

Nine releases in the package's first 50 days show active early development, but the median interval is about 1 hour 40 minutes, which suggests rapid iteration rather than demonstrated long-term stability.

Repo bus factorcaution

One contributor made all 110 commits in the last three months, leaving no demonstrated handoff capacity and increasing abandonment risk if that maintainer becomes unavailable.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is reported, leaving a meaningful repository hygiene gap for a package handling commercial and financial logic.

Security policycaution

The repository has no security policy, so users have no documented security reporting path or stated response expectations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
illuminate/support
Version ^11.0|^12.0|^13.0

Weekly Downloads

Info

Last Published
1 month ago
Created
1 month ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform