Package Health

bitbag/imoje-paywall-plugin

The release is stable, licensed, tested, and backed by an organization. However, the repository has no commits in three months, does not mention this package, and uses 12 unpinned actions. Pin this version only if the repository identity and maintenance status are confirmed.

Latest v3.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance concern for a payment integration.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link may be incorrect or the package may be piggy-backing on another project.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

All 12 analyzed action references are unpinned, weakening build reproducibility. The reported cache-poisoning findings are low-confidence hygiene alerts and do not independently establish a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
sylius/sylius
Version ^2.0.4
symfony/webpack-encore-bundle
Version ^2.1

Weekly Downloads

Info

Last Published
3 months ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform