Package Health

qoliber/customer-address-validator

The missing security policy and lack of security scanning reduce transparency, while the small project has clear licensing, documentation, and organizational backing. Its repository is not archived and was recently pushed, but release and commit activity remain limited.

Latest 1.0.6PackagistPackagist

67%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

88

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package has six releases over about two years, but none in the last 12 months and the latest release was about 16 months ago. This is a meaningful maintenance concern, though the project is not entirely inactive.

Repo commit activitycaution

There were no commits from active maintainers in the last 3 months, indicating limited recent development. A repository push recorded by repository_archived provides some counterevidence against complete abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest process gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a package used in Magento applications.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

qoliber

Direct Dependencies

DependencyLast ReleaseScore
magento/framework
Version >=103.0.6
—
—
magento/module-quote
Version *
—
—
magento/module-customer
Version *
—
—
magento/module-customer-graph-ql
Version *
—
—
magento/product-community-edition
Version >=2.4.6
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
2 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform