Package Health

exantrix/drupal-marketplace

Usable with caveats: this is a newly published package with no demonstrated maintenance history, tests, or changelog. It has a clear license, a matching repository reference, simple dependencies, and no risky installation workflows.

Latest v1.0.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health checks

Package scaffoldingcaution

A README is present, but neither the package nor repository contains tests or a changelog. For an integration that handles catalog synchronization and order notifications, the missing tests reduce confidence in maintenance and regression coverage.

Project backingcaution

The repository is owned by an individual user rather than an organization, so there is no organizational backing signal to offset the thin maintenance evidence.

Release historycaution

The package is 0 days old with only one release, so there is no release history yet to demonstrate sustained maintenance or maturity.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, but the repository and package are newly created, so this is weak evidence of abandonment rather than a severe maintenance collapse.

Repo popularitycaution

The repository has zero stars, forks, and watchers. That provides no community validation, although the package's age means low adoption signals are not unexpected.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
drupal/commerce
Version ^2.0 || ^3.0

Weekly Downloads

Info

Last Published
3 days ago
Created
3 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform