Documentation is substantial, and the package is clearly tied to an organization-owned repository. Maintenance has stopped for about 16 months, with no recent commits and no security policy or scanning.
60%
Total Score
75
100
83
83
The package has 16 releases over about 6 years, but no releases in the last 12 months; this indicates a meaningful slowdown despite an established history.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence that maintenance has stalled.
There are no open issues or pull requests and no activity in the last month; this is consistent with a quiet project but does not show active community maintenance.
The repository has no stars or forks and only two watchers. Popularity is supporting evidence, so this modest visibility is a minor maturity concern rather than a standalone health verdict.
Composer is used as a build tool, but no security scanning tools are present. The missing scanning is a hygiene gap, not evidence that the package is unsafe on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
d3/modcfg Version ^7.0 | — | — |
beberlei/assert Version ^3.3 | — | — |
oxid-esales/oxideshop-ce Version 7.0 - 7.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.