Package Health

novalnet/commerce-novalnet

Clear licensing, release notes, and a substantial artifact improve confidence. Only one commit from one contributor in the last three months, no security policy, and a repository mismatch leave meaningful maintenance and ownership concerns.

Latest 12.2.0PackagistPackagist

67%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo bus factorcaution

All recent commits came from a single contributor, creating a concentrated maintenance path. Organizational backing provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Only one commit was made in the last three months by one active maintainer. This shows recent maintenance but a very thin current activity level.

Repo issue activitycaution

The repository has one open issue and one open pull request, with no issues or pull requests opened or merged in the last month. This is limited evidence of active community maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. Although naming differences can occur, both indicators together raise concern that the linked source may not clearly identify the published package.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. The missing scanning coverage is a modest transparency and maintenance concern.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Novalnet AG

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
1 month ago
Created
5 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform