eltrino/orocrm-amazon-bundle
Risky to adopt for a new project: the last release was about nine years ago and the repository shows no recent commits or active maintainers. It has tests, a clear license, organization backing, and no deprecation, but the long inactivity is a substantial maintenance risk.
42%
Total Score
50
71
Health Score Breakdown
The package has 15 releases and a historically regular median interval of about 36 days, but its latest release was about nine years ago with no releases in the last 12 months. That long gap strongly increases abandonment and compatibility risk.
The repository recorded no commits and no active maintainers in the last three months, corroborating the long release hiatus rather than showing an actively maintained project.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency gap, though it is secondary to the much stronger evidence of prolonged inactivity.
The linked repository is not archived, which is a positive sign, but its last push was about nine years ago and does not offset the observed inactivity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eltrino LLC |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oro/crm Version >=2.0.0 | — | — |
guzzle/guzzle Version 3.7.* | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.