Package Health/paazl/magento2-checkout-widget

paazl/magento2-checkout-widget

This is a mature and actively maintained Magento package: it has been released 55 times since 2019, received 7 releases in the last 12 months, and the linked repository was updated recently with ongoing commits from two contributors. The package is not deprecated or archived, has tests and CI workflows, uses a small runtime dependency set, and has no install-time lifecycle scripts. The main concerns are the absence of any detected license, security policy, repository security scanning, and explicit GitHub Actions token permissions; these reduce transparency and defensive maturity but do not outweigh the evidence of active maintenance and coherent package ownership.

Latest 1.23.2

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

License

Neither a declared license nor a license file was detected, creating a real legal and transparency gap for developers considering the dependency.

Project backing

The repository is owned by the Paazl user account rather than an organization, so the small active contributor base cannot be discounted as organization-backed maintenance capacity.

Repo bus factor

Two contributors were active in the last three months, with the leading contributor responsible for about two-thirds of commits; this is a modest concentration risk, but the second active contributor provides partial resilience.

Repo issue activity

The repository has seven open issues and no open pull requests; recent activity is limited, but one pull request was merged in the last month, so this is not evidence of complete neglect.

Repo popularity

The repository has only 4 stars and 15 forks, indicating limited public popularity; popularity is supporting evidence only, so this modestly limits external validation without implying poor health.