cpigroup/php-amazon-mws

The package has clear documentation, release notes, tests in the source tree, and matching Apache-2.0 licensing. However, it has had no release for about 8 years, no recent commits, no security policy, and the repository does not identify or mention this package, making continued maintenance and provenance uncertain.

Latest 1.4.2

Packagist

42%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was about 8 years ago, with no releases in the past 12 months. This is strong evidence of abandonment risk for a library tied to an external service.

Repo commit activity

The repository recorded no commits and no active maintainers in the past 3 months, consistent with the long release silence and leaving little evidence of ongoing maintenance.

Repo issue activity

There were no newly opened or closed issues or pull requests in the past month, while 18 issues remain open. This adds to the evidence of limited current project activity.

Repo package mention

The repository name does not match the package name and its README does not mention the package. Although this can occur with subpackages, the absence of either link weakens provenance confidence.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest hygiene gap and does not outweigh the stronger maintenance concerns.