Package Health/magento/composer-dependency-version-audit-plugin

magento/composer-dependency-version-audit-plugin

Tests, release notes, clear licensing, and organizational ownership provide useful safeguards. The small user base and absent security policy leave less evidence for long-term support, so pinning this version is prudent.

Latest 0.1.6

Packagist

57%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only four releases have been published since June 2021, with no release in the last 21 months and a roughly 12-month median interval. This indicates slow maintenance for a dependency that may need compatibility updates.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the long release gap, this is meaningful evidence of currently quiet maintenance.

Repo issue activity

The repository has eight open issues and two open pull requests, with no issues or pull requests newly opened or merged in the last month. This suggests limited recent responsiveness.

Repo popularity

Five stars, seven forks, and eight watchers indicate a small public footprint. Popularity is only supporting evidence, but it provides little additional confidence in ongoing support.

Repo tooling

Composer is used as a build tool, but no security scanning tools were detected. For a plugin intended to address dependency-confusion concerns, that is a modest transparency gap.