heesapp/product-cart

The README is detailed, the MIT license is clear, and installation has no lifecycle scripts. Its sole release is 3 years 9 months old, with no repository traction and no security policy, so maintenance risk is high.

Latest v2.0.1

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the package's only release, published 3 years 9 months ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite the package not being deprecated.

Maintainers

Only one individual has registry publishing access, leaving a thin apparent maintainer base. The linked repository is also owned by a personal account, with no organizational backing shown to compensate for that concentration.

Repo popularity

The repository has 0 stars, 0 forks, and 1 watcher. Popularity is not decisive for a small package, but these figures provide no supporting evidence of active community use or review.

Repository archived

The repository is not archived, which keeps the project technically available, but it was last pushed on the same day as the only release 3 years 9 months ago. This does not offset the lack of ongoing maintenance.

Security policy

The repository has no security policy. This is a transparency gap for a package that handles cart and database-related application behavior, though it is less serious than the long maintenance gap.