Package Health/fond-of-oryx/jellyfish-sales-order-gift-card-proportional-value-connector

fond-of-oryx/jellyfish-sales-order-gift-card-proportional-value-connector

The package includes tests, an MIT license, and a small runtime dependency set, with organizational backing and no install-time scripts. Maintenance is not current, and the workflow uses all three analyzed actions without pinning; there is also no security policy or automated security scanning.

Latest 2.0.0

Packagist

60%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest registry release was January 23, 2023, with no releases in the last 12 months. This indicates a significant maintenance gap for a package still being considered at version 2.0.0.

Repo commit activity

The repository had zero commits and zero active maintainers in the last 3 months. The repository was pushed in January 2025, which shows some newer activity but does not offset the current lull.

Security policy

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not evidence of a vulnerability by itself.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned. The missing top-level permissions block is acceptable on its own, so this is a moderate hygiene concern rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Julian Hyatt

Direct Dependencies

Dependency	Last Release	Score
fond-of-oryx/gift-card-proportional-value Version ^1.0.0 \|\| ^2.0.0	—	—
fond-of-oryx/jellyfish-sales-order-gift-card-connector Version ^1.0.0 \|\| ^2.0.0	—	—