oro/crm-magento1-connector
The repository is not archived and includes tests, a changelog, and a clear license. However, there has been no commit activity for three months, and the registry marks the package as abandoned, making this release a poor long-term dependency choice.
18%
Total Score
50
67
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement given. This is a severe maintenance warning even though the linked repository is not archived.
The repository recorded zero commits and zero active maintainers over the last three months. That indicates current maintenance has stopped or is effectively dormant.
This is the package's only release, published 102 days ago, so there is no established release track record or demonstrated ongoing delivery.
The repository name does not match the package name and its README does not mention the package, weakening confidence that the linked source repository is specifically maintained for this release.
The repository has no security policy. This is a transparency and maintenance gap, although it is secondary to the package's abandoned status.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Oro, Inc |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 oro/crm Version 6.1.* | — | — |
guzzle/guzzle Version 3.7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.