bitbag/mailchimp-plugin
The project has strong documentation, tests, release notes, an MIT license, and organizational backing. Maintenance is currently quiet, while workflow dependencies are not pinned and the repository has no security policy. Pin this version only if its older maintenance pattern fits your support needs.
58%
Total Score
75
92
50
Health Score Breakdown
The package has 23 releases over about nine years, but none in the last 12 months; that weakens confidence in ongoing maintenance despite its established history.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign that maintenance has slowed substantially.
The repository has no security policy. This does not show a security defect, but it reduces transparency about how vulnerabilities are reported and handled.
All 12 analyzed action references are unpinned, which weakens build reproducibility. The four cache-poisoning findings are low-confidence hygiene warnings, so they do not independently make this a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 dompdf/dompdf Version ^2.0 | — | — |
sylius/sylius Version ~2.0 | — | — |
symfony/workflow Version ^7.2 | — | — |
sylius/twig-extra Version ^0.6 | — | — |
sylius/twig-hooks Version ^0.6 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.