Package Health/fond-of-impala/conditional-availability-cart-connector

fond-of-impala/conditional-availability-cart-connector

The codebase includes tests, a clear MIT license, and organization ownership. The repository is not archived, but the long release gap, no recent commits, and absent security policy make ongoing support uncertain.

Latest 2.2.0

Packagist

56%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The source repository contains tests, which supports project maturity, but the package has no README for developers integrating this library. The missing changelog is normal packaging practice and is not a concern.

Release history

The package has had 5 releases since June 2023, but its latest release was in January 2024 and it had no releases in the last 12 months. This is a meaningful maintenance concern.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.

Security policy

The linked repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.

Workflow audit

All 3 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or high-severity findings, which limits the impact to hygiene.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Rose

József Geng

Direct Dependencies

Dependency	Last Release	Score
spryker/cart Version ^4.2.0 \|\| ^5.0.0 \|\| ^6.0.0 \|\| ^7.0.0	—	—
spryker/customer Version ^4.0.0 \|\| ^5.0.0 \|\| ^6.0.0 \|\| ^7.0.0	—	—
spryker/cart-extension Version ^2.2.1 \|\| ^3.0.0 \|\| ^4.0.0	—	—
spryker/quote-extension Version ^1.2.0	—	—
fond-of-impala/conditional-availability Version ^1.0.0 \|\| ^2.0.0	—	—