diepxuan/module-synccrm

The package has a clear MIT license, a matching source repository, and organization backing. Its maintenance record is thin, with no commits in the last three months and no releases in the last 12 months; workflow references are also unpinned.

Latest 0.0.3

Packagist

58%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 536 days old but has only three releases, all concentrated between March 31 and April 3, 2025, with no releases in the last 12 months. This indicates a short and now-stalled release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the stalled release history, this is meaningful evidence of limited current maintenance.

Security policy

The repository has no security policy. This reduces vulnerability-reporting transparency, though it is a secondary concern compared with the inactive maintenance record.

Version stability

Version 0.0.3 is not a stable major release, so the public API may still change. It is not marked prerelease, which provides some compensation but does not remove the maturity concern.

Workflow audit

Both workflows were analyzed successfully, use job-level permissions, and have no untrusted checkouts or script-injection findings. However, both of the two action references are unpinned, leaving a modest build-integrity hygiene gap.