Package Health

centarro/commerce_kickstart

The release has clear installation guidance, release notes, and organization backing. Its short release history and absent recent commit activity leave maintenance capacity less proven than its packaging suggests.

Latest 5.1.0PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Lifecycle scriptscaution

Composer post-install and post-update scripts run during installation and updates. This is common for Drupal packages but increases install-time behavior that consumers should understand.

Release historycaution

Only two releases have been published, with one release in the last 12 months and a median interval of about 206 days. This is a limited maintenance track record for a package intended as a project foundation.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Although the repository was pushed more recently overall, this recent inactivity weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, supporting a reproducible project workflow. No security scanning tools were detected, which is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and maintainer response expectations undocumented.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
drupal/core
Version ^11
—
—
drupal/config_split
Version ^2.0@beta
—
—
drupal/config_rewrite
Version ^1.4
—
—
drupal/symfony_mailer
Version ^1.2
—
—
drupal/commerce_kickstart_base
Version ^1
—
—

Weekly Downloads

Info

Last Published
11 months ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform