Package Health/fond-of-spryker/jellyfish-b2c

fond-of-spryker/jellyfish-b2c

The MIT license, direct repository match, and small runtime dependency footprint make the code straightforward to inspect. The repository has no tests or security policy, adding maintenance and transparency concerns. Use only if this unmaintained module fits your needs and you can support it yourself.

Latest 1.0.0

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact includes a README and release notes for this version, while the absence of packaged tests and a changelog is normal packaging practice. The repository itself also reports no tests or changelog, limiting transparency somewhat.

Release history

The package has only one release, published about six years ago, with no releases in the last 12 months. That is strong evidence of abandonment for a dependency receiving ongoing use.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with its last push being about six years ago. Organization backing does not compensate for absent recent maintenance.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. That weakens automated assurance, although it is a secondary concern compared with the long maintenance gap.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a package intended to be integrated into an application.