Package Health

basicrum/basicrum-magento-2

The release includes detailed installation guidance, release notes, repository tests, and a changelog, while its workflows use read-only permissions and fully pinned actions. A security policy is absent, so disclosure and maintenance practices are less transparent than the otherwise solid project structure suggests.

Latest 0.1.1PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

79

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This is the package's first release, published today, so there is no established release cadence or long-term maintenance record. The linked repository and release documentation provide some compensating evidence, but not evidence of sustained history.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months. Because the repository was created or updated only at the time of this release, this may reflect limited history, but it leaves ongoing maintenance unproven.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. The absence of scanning is a hygiene gap, not evidence that the release is unsafe by itself.

Security policycaution

No security policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented. The repository's tests and workflow controls provide some engineering transparency but do not replace a reporting policy.

Version stabilitycaution

Version 0.1.1 is not a stable major release, which signals an early-stage API and a greater chance of compatibility changes. It is not marked as a prerelease, so this is a moderate maturity concern rather than a release-blocking issue.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Tsvetan Stoychev

Direct Dependencies

DependencyLast ReleaseScore
magento/framework
Version ^103.0
—
—
magento/module-csp
Version ^100.4
—
—
magento/module-store
Version ^101.1
—
—
magento/module-config
Version ^101.2
—
—
magento/module-backend
Version ^102.0
—
—

Weekly Downloads

Info

Last Published
15 hours ago
Created
15 hours ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform