badaso/commerce-module
Tests, release notes, and an organizational repository provide useful support. The MIT license file conflicts with the proprietary manifest, while workflows use unpinned images and recent maintenance has paused. Pin this version only if the licensing terms are clarified.
58%
Total Score
50
70
50
Health Score Breakdown
The artifact contains an MIT license file and the repository also has one, but the manifest declares the package proprietary; that mismatch needs clarification before adoption.
The package has 11 releases but none in the last 12 months; the latest release was about 15 months ago, indicating a meaningful maintenance slowdown.
There were no commits and no active maintainers in the last 3 months, reinforcing the concern raised by the lack of releases in the last year.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a package that handles commerce functionality.
Version 0.4.0 is not a stable major release, although it is not marked as a prerelease and recent releases contain no prerelease versions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 UASOFT |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mbezhanov/faker-provider-collection Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.