angellco/vend
The package has a clear license, README, changelog, and no install-time scripts. Its repository has no security policy or scanning, while release and commit activity stopped over two years ago. Pin this version only if its Craft and Vend integrations remain suitable for your project.
55%
Total Score
50
88
75
Health Score Breakdown
The package has 49 releases, but none in the last 12 months and the latest release was over two years ago, indicating materially slowed maintenance.
The repository recorded no commits and no active maintainers in the last three months, consistent with the release gap and increasing abandonment risk.
Composer build tooling is present, but no security-scanning tools were detected; this is a maintenance and transparency gap for an integration handling store data.
The linked repository has no security policy, leaving no documented channel or process for reporting and handling security issues.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Angell & Co |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^3.3.15 | — | — |
craftcms/feed-me Version ^4.1 | — | — |
craftcms/commerce Version ^2.2.8 || ^3.0.0 | — | — |
venveo/craft-oauthclient Version ^2.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.