hevelop/ean-generator
The matching repository and readable installation guidance improve transparency, but the license metadata conflicts with the README. One maintainer, no security policy, and minimal repository activity leave little evidence of ongoing support.
38%
Total Score
50
75
50
Health Score Breakdown
The latest release was published on March 26, 2018, with no releases in the last 12 months. This is strong evidence that the package is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.
The manifest declares OSL-3.0, while the README states AGPL-3.0 and no license file was detected. The package is licensed, but the conflicting declarations reduce transparency and warrant verification.
Only one registry maintainer is listed. Project backing shows an organization-owned repository, which provides some context, but the observed activity does not show an active maintainer base.
The linked repository has no security policy. This is a hygiene and disclosure gap, especially for a package that integrates into an application platform.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alex Bordin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 steverobbins/magento-shell Version ^1.0 | — | — |
magento-hackathon/magento-composer-installer Version * | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.