Package Health

fond-of-oryx/stock-product-api

The repository is backed by an organization, includes tests and useful documentation, and is not archived. Its workflow references are unpinned and the package has seen no registry releases since March 2023, so future compatibility and maintenance are uncertain.

Latest 1.0.0.beta.1PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Health Score Breakdown

Release historydanger

The package has had only two releases, with none in the last 12 months; the latest registry release was about three and a half years ago. This is substantial evidence of limited ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured. Combined with the long release gap, this points to weak current maintenance activity.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That leaves vulnerability-reporting expectations unclear, although it does not by itself show that the package is unsafe to depend on.

Version stabilitycaution

The assessed version is a prerelease, and all recent releases are prereleases. That raises compatibility risk for a package intended for integration into an application.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Julian Hyatt

Direct Dependencies

DependencyLast ReleaseScore
spryker/api
Version ^0.4.0
—
—
spryker/stock
Version ^8.0.0
—
—
spryker/api-extension
Version ^0.1.0
—
—
spryker/api-query-builder
Version ^0.1
—
—

Weekly Downloads

Info

Last Published
3 years ago
Created
3 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform