Package Health

fond-of-kudu/oms-order-confirmation

The repository includes tests and the package has a clear MIT license, while its organization ownership supports continuity. Its small dependency surface and lack of install scripts reduce adoption risk, but there is little evidence of recent project activity.

Latest 1.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

This package has made only one release, on August 18, 2023, with no releases in the last 12 months. That provides little evidence of ongoing maintenance and lowers confidence in continued support.

Repo toolingcaution

The repository uses Make and Composer for build-related work, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of abandonment.

Repository archivedcaution

The linked repository is not archived, although its last push was on September 21, 2023. The active status is positive, but the old last-push date is consistent with the maintenance concern from the release history.

Workflow auditcaution

The workflow audit was complete and found no dangerous triggers, untrusted checkouts, injection findings, or high-confidence audit issues. However, all three action references are unpinned, which leaves the workflow exposed to upstream action changes.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pascal Fischer

Direct Dependencies

DependencyLast ReleaseScore
spryker/oms-extension
Version ^1.0.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform