fond-of-spryker/cross-engage
The package has tests, a clear MIT license, a matching README, and organization backing that supports accountability. Its maintenance record is the main concern, so pinning this version is prudent.
58%
Total Score
67
80
Health Score Breakdown
The package has nine releases since November 2019, but none in the last 12 months and the latest release was in December 2022. This is a meaningful maintenance concern despite its previously regular release interval.
The repository had zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive since December 2022. This raises abandonment risk.
There were no new or closed issues or pull requests in the last month. This supports the inactivity concern, although an empty issue queue is not independently severe.
The project uses Composer for its build, which is appropriate for a Packagist package, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pascal Fischer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spryker/kernel Version ^3.0.0 | — | — |
spryker/glossary Version ^3.0.0 | — | — |
guzzlehttp/guzzle Version ~6.2 | — | — |
spryker/zed-request Version ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.