Package Health/digital-marketing-framework/distributor-salesforce

digital-marketing-framework/distributor-salesforce

Healthy and suitable to use, with minor transparency and maintenance caveats. It has recent releases, an active organization-backed repository, tests, release notes, and security tooling, though the package has no README and recent work is concentrated in one contributor.

Latest 3.1.0

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes tests and this exact version has GitHub release notes, while the missing package README is a usability gap for a library consumers must integrate. The repository also has tests, which partly offsets the documentation weakness.

Repo bus factor

All recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some ability to hand maintenance off, so this is a caution rather than a severe risk.

Repo commit activity

The repository recorded one commit in the last 3 months from one active maintainer. Recent activity exists, but the low volume provides limited evidence of sustained maintenance.

Repo issue activity

There are no open issues and two open pull requests, but no issues or pull requests were merged in the last month. This is a mild activity concern rather than evidence of abandonment.

Security policy

No repository security policy was found, reducing transparency around vulnerability reporting. The presence of Dependabot and Semgrep provides partial compensation but does not replace a reporting policy.