enhavo/enhavo-shop

Its MIT license, tests, and organization-owned repository provide useful provenance, while the small dependency surface limits complexity. The absence of any commits or releases for about eight years makes future fixes and compatibility support unlikely.

Latest v0.5

Packagist

38%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published about eight years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited prospects for maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. That is a modest hygiene gap and does not outweigh the repository's inactivity.

Security policy

The repository has no security policy, leaving vulnerability-reporting and response expectations unclear. This is a secondary transparency gap beside the much larger maintenance concern.

Version stability

Version v0.5 is not a stable major release, which adds maturity and compatibility uncertainty to an already inactive project.