goldfinch/trademe

The MIT license and matching source tree make its provenance clear. It has no tests, changelog, security policy, or scanning, so changes are harder to validate. Its focused scope may offset the moderate dependency load.

Latest v2.0.1

Packagist

57%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Eleven runtime dependencies, including framework, API, encryption, and scheduled-task components, create meaningful transitive maintenance exposure, though the package has a defined Composer dependency profile.

Package scaffolding

The package includes a README, while the absence of tests and a changelog is normal for published artifacts; however, the repository also reports neither, leaving validation and change history limited.

Project backing

The registry namespace and repository owner match, providing consistent ownership context; the owner is an individual account, so there is no organizational backing to offset the thin maintenance evidence.

Release history

The latest release was over two years ago, with no releases in the last 12 months; the seven-release history shows an established package but currently inactive maintenance.

Repo commit activity

The repository had no commits or active maintainers in the last three months, reinforcing the release-history evidence of prolonged inactivity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Art Karasev

Direct Dependencies

Dependency	Last Release	Score
goldfinch/helpers Version ^2.0	—	—
silverstripe/admin Version ^2.0	—	—
silverstripe/crontask Version ^3.0	—	—
silverstripe/framework Version ^5.0	—	—
goldfinch/trademe-php-api Version ^1.0	—	—