ddaproduction/evocms-discounts
Risky to adopt: the package has had no release or repository activity since April 2021, and its 0.0.3 version remains immature. It has a substantial implementation and documentation, but the missing license and absent security policy add transparency concerns.
38%
Total Score
50
63
83
Health Score Breakdown
The package has only 3 releases, all within its first week, and none in the last 12 months; the latest release was over five years ago. This strongly suggests abandonment despite the short initial release interval.
There were no commits and no active maintainers in the last three months, consistent with the repository's last push being over five years ago. This is the strongest evidence of abandonment risk.
Neither a declared license nor a license file was found, leaving the legal terms for using and redistributing this dependency unclear.
Composer is used as the build tool, showing basic project tooling, but no security scanning tools were detected. The tooling is adequate for packaging but provides little evidence of ongoing quality oversight.
The repository is not archived, which is a positive signal, but its last push was over five years ago. The unarchived status does not compensate for the prolonged inactivity shown by the repository activity signals.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.