moloni/magento2

The package has a clear license, matching source repository, and simple dependency footprint. Its small user base and lack of security tooling make long-term support less reassuring.

Latest 1.3.9

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was over 3 years ago, with no releases in the last 12 months. This is the strongest maintenance concern, although the package has a history of 13 releases.

Repo commit activity

The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.

Repo popularity

The repository has 6 stars, 4 forks, and 2 watchers. This is limited adoption evidence, though popularity is supporting evidence rather than a health verdict.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. The build setup is adequate, while the missing security checks modestly reduce confidence.

Security policy

The repository has no security policy, reducing transparency about how users should report vulnerabilities. This is a meaningful hygiene gap for an extension handling store and invoicing integrations.