advox/ingredients

Its MIT license and one runtime dependency make the package easy to inspect and limit dependency exposure. The missing README and absent security scanning add smaller adoption and transparency gaps.

Latest 1.1.1

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published in April 2018, with no releases in roughly eight years. That strongly indicates abandonment for a dependency consumers may need to maintain.

Repo commit activity

The repository has had zero commits and zero active maintainers in the last three months, consistent with the long release gap and leaving no evidence of ongoing maintenance.

Package scaffolding

The package has no README, reducing consumer guidance for a Magento module; absent tests and changelog are normal for a published artifact and are not counted against it.

Repo tooling

Composer build tooling is present, but no security-scanning tooling is reported. That is a transparency and maintenance gap, though not evidence of a defect by itself.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a secondary concern alongside the much larger maintenance gap.