commercetools/spec-sdks

Risky to adopt: Packagist marks this package abandoned, and the repository has had no commits from maintainers in the last three months. It has strong documentation, licensing, security tooling, and a long release history, but those positives do not offset the package-level abandonment status.

Latest 11.0.0

Packagist

42%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, not merely this release, and provides no distinct replacement beyond the same package name. This is a severe adoption concern even though releases exist.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months. This lack of current development materially increases abandonment risk, especially alongside the registry abandonment flag.

Repo package mention

The repository name does not match the package name and its README does not mention this package, so the linkage is less transparent and the package could be piggy-backing on a related repository. The organization match provides only partial reassurance.

Security policy

No security policy is present in the repository, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though security scanning tools provide some compensation.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
psr/log Version ^1.0 \|\| ^2.0 \|\| ^3.0	—	—
psr/cache Version ^1.0 \|\| ^2.0 \|\| ^3.0	—	—
ramsey/uuid Version ^4.0	—	—
symfony/cache Version ^3.0 \|\| ^4.0 \|\| ^5.0 \|\| ^6.0 \|\| ^7.0	—	—
guzzlehttp/psr7 Version ^1.7 \|\| ^2.0.0	—	—