Package Health/dcsg/mailchimp-api-connector-bundle

dcsg/mailchimp-api-connector-bundle

The bundle is small, clearly licensed, and has a focused dependency profile with no install-time scripts. It lacks security scanning and a security policy, leaving little evidence of ongoing oversight.

Latest v2.0.1

Packagist

32%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only three releases, all concentrated around March 2014, with no releases in the last 12 months and a package age of about 12.5 years. This is strong evidence of abandonment for a maintained integration package.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the last push in 2014, this indicates sustained abandonment.

Project backing

The repository is owned by a personal user account rather than an organization. That does not prove the project is unsafe, but it provides no organizational maintenance backing to offset the inactivity.

Repo issue activity

There were no recent issues or pull requests, and none are currently open. This is consistent with an inactive project, though it provides less evidence than the release and commit history.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured. The build setup is appropriate, while the missing security tooling is a modest transparency and oversight gap.