Package Health/myparcelcom/marketplace-commons

myparcelcom/marketplace-commons

This is a generally healthy, mature package with releases since 2021, 59 total releases, 12 releases in the last 12 months, a stable non-prerelease version, active organizational backing, and a repository that is neither archived nor mismatched. The artifact includes tests, a README, a complete-looking source tree, and a license, while installation lifecycle scripts are absent. The main concerns are that repository commit activity reports no commits or active maintainers in the last 3 months, the repository lacks security scanning and a security policy, and its sole workflow does not declare top-level token permissions. These are meaningful transparency and maintenance-process gaps, but they do not outweigh the strong release history, current repository state, testing, and project backing.

Latest v4.0.14

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

No commits or active maintainers are reported in the last 3 months, which is a maintenance warning despite the recent push and ongoing release history.

Repo popularity

The repository has zero stars and forks and only two watchers, indicating limited external adoption or visibility; popularity is supporting evidence, so this is only a caution rather than a health verdict.

Repo tooling

Composer build tooling is present, but no security scanning tools are configured, leaving a preventable supply-chain hygiene gap.

Security policy

The repository has no security policy, reducing transparency about vulnerability reporting and maintainer response expectations.

Token permissions

The only workflow lacks top-level token permissions, so its GitHub Actions permissions are less explicitly constrained than recommended, although no top-level write permissions were observed.