Package Health

fond-of-oryx/splittable-checkout-rest-api-shipment-connector

The package has been mature and licensed, with tests, an active organization-owned repository, and no deprecation. Its registry release history is stale, recent repository activity is absent, and workflow dependencies are all unpinned.

Latest 2.0.0PackagistPackagist

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

Only two releases exist, with the latest published more than three years ago and no releases in the last 12 months. The repository was pushed more recently, but the package release cadence remains stale.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which raises concern about ongoing maintenance capacity.

Repo issue activitycaution

There were no new issues or pull requests in the last month and no pull requests were merged. This is weak evidence of current community activity, though open issue data is unknown.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations unclear.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Daniel Rose

Direct Dependencies

DependencyLast ReleaseScore
fond-of-oryx/splittable-checkout-rest-api-extension
Version ^1.0.0 || ^2.0.0
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform