Package Health/intelligentspark/isotope_productgrouplist

intelligentspark/isotope_productgrouplist

The repository is tiny and has no security policy, while the package has only one registry maintainer. Its dependency set is explicit and the repository is not archived, but those positives do not offset the maintenance risk.

Latest 1.2.4

Packagist

15%

Total Score

Maintainer Stability

Maturity

Supply Chain

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because the release is no longer presented as maintained.

Release history

The latest release was published in March 2017, and there have been no releases in the last 12 months despite the package being nearly ten years old. This strongly indicates abandonment.

Maintainers

Only one account has registry publishing access. A single maintainer can be normal for a small package, but here it provides little visible maintenance capacity alongside the stale release history.

Repo package mention

The repository name does not match the package name, and no README mention was available. That weakens transparency about whether the linked source is the intended project.

Repo tooling

Composer is used for builds, which is appropriate for this package, but no security-scanning tooling was detected. This is a minor hygiene gap rather than the main adoption concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

intelligentspark

Direct Dependencies

Dependency	Last Release	Score
contao/core Version >=3.3.0,<4.0.0-dev	—	—
isotope/isotope-core Version ~2.3	—	—
terminal42/contao-namespace-class-loader Version ~1.0	—	—
contao-community-alliance/composer-plugin Version *	—	—