Package Health/fond-of-oryx/customer-product-lists-rest-api

fond-of-oryx/customer-product-lists-rest-api

The repository is backed by an organization, includes tests, and is not archived. However, the registry has seen no release in over three years, recent commit activity is absent, and workflow dependencies are all unpinned; there is also no security policy.

Latest 2.0.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was published on January 23, 2023, and there have been no releases in the last 12 months despite the package being over three years old. This is a meaningful maintenance concern.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this raises the risk that maintenance has stalled.

Repo tooling

The repository uses Make and Composer for builds, but no security scanning tools are present. The build setup is clear, while the missing scanning is a modest hygiene gap.

Security policy

No security policy was found in the repository. This weakens the project's documented process for reporting and handling vulnerabilities.

Workflow audit

The single workflow was fully analyzed with no reported audit findings and no dangerous triggers or untrusted checkouts. All three action references are unpinned, which is a workflow hygiene risk.