Package Health/niiph/product-label-plugin

niiph/product-label-plugin

The project has a very small release history and no commits in the last three months. Build tooling and Dependabot are present, but the repository mismatch, license inconsistency, and install-time scripts warrant checking before adoption.

Latest v0.1.1

Packagist

51%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

The artifact contains an MIT license file, but the manifest declares the package proprietary; that mismatch should be resolved before dependency adoption.

Lifecycle scripts

Composer install, update, and project-creation scripts run during package operations, increasing installation complexity and the code that should be reviewed.

Project backing

The repository is owned by an individual account rather than an organization, so there is no visible organizational backing to compensate for the thin maintenance record.

Release history

Only two releases exist across about two and a half years, with one release in the last 12 months and a median interval of about 620 days, indicating a thin maintenance record.

Repo package mention

The repository name does not match the package name and its README does not mention the package, raising uncertainty about whether it is the intended source repository.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
sylius/sylius Version ^1.12 \|\| ^1.13 \|\| ^1.14	—	—
niiph/sylius-common Version ^0.1.0	—	—
sylius/mailer-bundle Version ^1.8 \|\| ^2.0@beta	—	—
symfony/webpack-encore-bundle Version ^1.15 \|\| ^2.0	—	—