Package Health

fond-of-oryx/cart-search-rest-api

Cart search rest api bundle

Latest 2.1.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package scaffoldingcaution

The artifact contains tests and the repository also has tests, supporting implementation quality. The published package has no README, which is a transparency and integration gap for this library-style package.

Release historycaution

The package has only three releases and no releases in the last 12 months; its latest registry release was over two years ago. This is a meaningful maintenance concern, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with no registry releases in the last year, this points to slowing maintenance, though the repository was pushed in January 2025.

Repo toolingcaution

The repository uses Composer and Make for build tasks, but no security scanning tools were detected. The tooling is adequate for project maintenance, while automated security coverage is limited.

Security policycaution

No repository security policy was found. This reduces transparency around vulnerability reporting, but it is not by itself evidence that the package is unsafe to depend on.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Rose

Direct Dependencies

DependencyLast ReleaseScore
spryker/quote
Version ^1.0.0 || ^2.0.0
—
—
spryker/glossary-storage
Version ^1.5.0
—
—
spryker/glue-application
Version ^1.0.0
—
—
spryker/glue-application-extension
Version ^1.0.0
—
—
fond-of-oryx/cart-search-rest-api-extension
Version ^1.0.0 || ^2.0.0
—
—

Weekly Downloads

Info

Last Published
2 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform