Package Health

flipboxfactory/patron-salesforce

The package is clearly documented, MIT-licensed, and published from an organization-backed repository without install-time scripts. Recent repository activity has stopped, and the project has no security policy or scanning tools, so maintenance and transparency need attention.

Latest 5.0.0PackagistPackagist

67%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. The recent release partly compensates for this, but the current lack of observed development lowers confidence in ongoing maintenance.

Repo popularitycaution

The repository has 1 star, 0 forks, and 2 watchers, indicating a very small user footprint. Popularity is only supporting evidence, so this is a minor concern rather than a verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a package handling OAuth integration, that is a modest security-process gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it does not by itself show that the package is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
flipboxfactory/patron
Version ^5.0
flipboxfactory/craft-salesforce
Version ^5.0
flipboxdigital/oauth2-salesforce
Version ^1.0

Weekly Downloads

Info

Last Published
10 months ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform