Package Health

fond-of-oryx/company-brand-product-list-connector

Maintenance has been quiet since the last registry release, and the repository has no security policy. The package is licensed, tested, organization-backed, and not archived, which reduces adoption risk.

Latest 2.0.0PackagistPackagist

57%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Package scaffoldingcaution

The package contains tests and the repository contains tests, which supports maintainability. The missing README is a minor consumer-documentation gap for a library, while the absent changelog is expected packaging practice.

Release historycaution

The package has only two releases, with none in the last 12 months; the latest release was over three years ago. This points to limited ongoing maintenance, although the stable 2.0.0 version remains available.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. This is meaningful evidence of currently quiet maintenance, despite the repository not being archived.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. The build setup is present; the missing scanning is a modest transparency and maintenance concern.

Security policycaution

No security policy was found in the repository. For a small connector library this is a hygiene gap rather than evidence that the release is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Rose

Direct Dependencies

DependencyLast ReleaseScore
fond-of-spryker/brand-company
Version dev-master
—
—
fond-of-oryx/brand-product-list-connector
Version ^1.0.0 || ^2.0.0
—
—
fond-of-oryx/company-product-list-connector-extension
Version ^1.0.0 || ^2.0.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform