goldfinch/harvest

The package has a clear MIT license, a useful README, and no install-time scripts. Its small single-person publishing base and absent recent maintenance make future compatibility and support uncertain.

Latest v2.0.2

Packagist

45%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

100

Health Score Breakdown

Release history

The latest release was about 2 years and 4 months ago, with no releases in the last 12 months; this is a substantial maintenance concern for a package integrated with several framework components.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing that maintenance has effectively stopped rather than merely slowed.

Dependency profile

Five runtime dependencies, including Silverstripe components and related Goldfinch packages, make compatibility with an aging release more consequential, though the dependency count is not excessive.

Maintainers

Only one registry publishing maintainer is listed, creating a thin publishing base and increasing continuity risk, although the linked repository is owned by the same individual.

Repo tooling

Composer is used as the build tool, but no security scanning tools are configured; the missing scanning is a minor hygiene gap, not a standalone adoption blocker.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Art Karasev

Direct Dependencies

Dependency	Last Release	Score
goldfinch/taz Version ^2.0	—	—
silverstripe/admin Version ^2.0	—	—
goldfinch/cli-supplier Version ^2.0	—	—
silverstripe/framework Version ^5.0	—	—