pronamic/wp-mollie

This is a generally usable and transparently packaged dependency with a stable v2.0.0 release, 18 releases over roughly 3 years and 2 releases in the last 12 months. The linked organization-owned repository is not archived, has matching package naming, includes tests, changelog, CI workflows, and build tooling, and shows recent issue and pull-request completion. However, commit activity is currently absent despite the recent repository push and release, the project has only one registry publisher, security scanning and a security policy are missing, workflow token permissions are unspecified, and install-time lifecycle scripts add operational complexity. Overall, it is suitable with caution, but its maintenance continuity and repository security hygiene warrant monitoring.

Latest v2.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package uses post-install-cmd and post-update-cmd scripts, which increase installation-time behavior and operational review requirements even though no dangerous workflow behavior was observed.

Maintainers

Only one registry publisher, Pronamic, is listed, which is a limited publishing redundancy; the organization-owned repository provides some compensating project backing.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance-continuity concern; the recent push and release provide some counterevidence but do not remove the gap.

Repo popularity

The repository has only 2 stars and no forks, providing little external adoption evidence, but popularity is supporting evidence and does not by itself indicate abandonment.

Repo tooling

Composer build tooling is present, supporting reproducible project setup, but no security scanning tools were detected, leaving a security-hygiene gap.