Package Health/fond-of-oryx/company-product-lists-rest-api

fond-of-oryx/company-product-lists-rest-api

The source is organized, tested, and backed by an organization, with no install scripts or deprecation notice. Workflow references are unpinned, and the project has no security scanning or security policy.

Latest 2.0.1

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had only three releases since November 2022, with no release in the last 12 months; the latest release was in December 2023. This indicates substantially slowed maintenance for a dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the old latest registry release, this is meaningful evidence of slowed maintenance.

Repo issue activity

No issues or pull requests were created or merged in the last month, and no pull requests are open. This supports the picture of a quiet project, though it is weaker evidence than the release and commit data.

Repo tooling

The repository uses Make and Composer, but no security-scanning tools were detected. The missing scanning is a modest maintenance and assurance gap, not a standalone severe risk.

Security policy

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, although it does not by itself show that the package is unsafe.