Package Health

fond-of-impala/company-business-units-carts-rest-api

The package has tests, a matching source repository, and clear MIT licensing. Its single release over about 2 years and 8 months ago, no commits in the last 3 months, and fully unpinned workflow actions leave maintenance and build-integrity concerns.

Latest 1.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

There has been only one release, published about 2 years and 8 months ago, with none in the last 12 months. That limited history and long silence make ongoing maintenance uncertain.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The repository is not archived, but this does not compensate for the current lack of activity.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling issues, although the package has tests and a visible source repository.

Workflow auditcaution

The only workflow was fully analyzed and has no untrusted checkout or injection findings, but all 3 action references are unpinned. This is a build-hygiene weakness rather than a severe risk on its own.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Rose

Direct Dependencies

DependencyLast ReleaseScore
spryker/glue-application
Version ^1.0.0
—
—
spryker/company-business-unit
Version ^2.10.0
—
—
fond-of-impala/company-user-quote
Version ^1.0.0
—
—
spryker/glue-application-extension
Version ^1.0.0
—
—
fond-of-impala/company-business-unit-quote-connector
Version ^1.0.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform