Package Health/ekvio-dev/integration-app-invoker-user-synhronizer

ekvio-dev/integration-app-invoker-user-synhronizer

Tests, a clear MIT license, and no install-time scripts support routine use. The tiny repository footprint and lack of security process leave little independent assurance.

Latest 4.1.3

Packagist

45%

Total Score

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 29 releases since August 2020, but none in the last 12 months and the latest release was about two years ago. This is a substantial maintenance and abandonment concern.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package. It may still be related, but ownership and source provenance are not clearly demonstrated.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. The build setup is ordinary, while the absence of scanning reduces assurance.

Security policy

The repository has no documented security policy, leaving no clear process for reporting or handling vulnerabilities. This is a modest transparency gap for a package with no other security-process evidence.

Version stability

The assessed version is 4.1.3, while the registry reports 3.4.0 as the latest version. That inconsistency weakens release transparency and confidence in the published version history.