Package Health

fond-of-spryker/setup-frontend

The repository has no security policy or security-scanning tools, and its small footprint offers limited maintenance evidence. A clear README, MIT license, organization backing, and no install-time scripts provide useful safeguards, but not enough to offset the age of the release.

Latest 1.0.1PackagistPackagist

38%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

71

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The latest release was over 7 years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite four historical releases.

Repo issue activitycaution

There were no new or closed issues or pull requests in the measured month. With no current discussion or change activity, this adds to the maintenance concern.

Repo popularitycaution

The repository has zero stars and forks and only three watchers. Popularity is not required for a healthy small package, but these figures provide little supporting evidence of active use or review.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling is reported. That limits evidence of routine security checks for a package with no recent release activity.

Security policycaution

No security policy is present in the repository, leaving vulnerability reporting and response expectations undocumented. This is a hygiene and transparency gap, not proof of an unsafe release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Pascal Fischer

Direct Dependencies

DependencyLast ReleaseScore
spryker/kernel
Version ^3.0.0
spryker/zed-request
Version ^3.0.0
spryker/setup-frontend
Version ^1.0.2

Weekly Downloads

Info

Last Published
7 years ago
Created
7 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform