Package Health/dnafactory/module-check-virtual-product

dnafactory/module-check-virtual-product

Risky to adopt: this is a small, clearly identified Magento module, but it has had no release or repository activity for more than five years. Its missing license and lack of current maintenance make long-term support uncertain.

Latest 1.0.0

Packagist

45%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The package has only one release, published about 6 years and 2 months ago, with no releases in the last 12 months. That is strong evidence of abandonment risk, although the module's narrow scope may reduce the need for frequent releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the package's long release silence. This materially weakens confidence that compatibility or defects will be addressed.

License

Neither a declared license nor a license file was found in the package or repository. That creates a real legal and transparency concern for dependency adoption.

Repo tooling

Composer is used as the build tool, which fits the PHP package, but no security scanning tooling is present. This is a modest transparency and maintenance gap rather than a standalone severe risk.

Repository archived

The repository is not archived, which preserves a path for future maintenance, but its last push was about 5 years and 10 months ago. The inactive repository does not compensate for the prolonged maintenance gap.