onetoweb/trustedshops

The package is small and focused, with a clear MIT license and matching source repository. Its lack of tests and security policy leaves little evidence for ongoing quality control.

Latest v1.0.2

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The package includes a README and release notes for this version, which supports basic consumer transparency. It has no tests or changelog; the missing tests are a modest quality concern, while the release notes partly compensate for the missing changelog.

Release history

The latest of only three releases was published in February 2022, with no releases in the following four years. This is strong evidence of low maintenance activity for a dependency.

Repo commit activity

The repository recorded no commits and no active maintainers during the last three months, consistent with the long release gap. The repository is not archived, but there is no observed recent development.

Repo tooling

Composer is used for the build, but no security scanning tools are configured. For a small API client this is a meaningful, though not severe, gap in ongoing quality assurance.

Security policy

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This increases maintenance uncertainty, especially alongside the absence of recent activity.