Package Health

redx1t/shoppingcart

This is a mature, stable package with a long release history, an MIT license, a complete small source tree, tests, no install-time lifecycle scripts, and a current non-archived repository. The main concerns are the absence of repository commit activity and security tooling, zero recorded popularity and recent issue/PR activity, and reliance on a single registry maintainer. The recent release and explicit README package reference provide some evidence of ongoing stewardship, but maintenance depth and independent project activity remain limited, so adoption is reasonable with normal dependency review rather than a high-confidence choice for critical infrastructure.

Latest 3.6.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Health Score Breakdown

Maintainerscaution

Only one account has registry publish access. This is a genuine continuity and bus-factor concern for a user-owned project, although registry access alone does not establish who actively maintains it.

Project backingcaution

The repository is owned by a user account rather than an organization, so there is no organizational backing to offset the single-maintainer concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although the latest package and repository push are current, the lack of sustained commit activity raises a meaningful maintenance-continuity concern.

Repo issue activitycaution

There were no new issues or pull requests in the last month and no merged pull requests; this may reflect a quiet small library, but it provides little evidence of active community maintenance.

Repo popularitycaution

The repository reports zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible community footprint weakens confidence in external validation and support.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Rob Gloudemans

Direct Dependencies

DependencyLast ReleaseScore
illuminate/events
Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6|^7|^8|^9|^10|^11|^12|^13
—
—
illuminate/session
Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6|^7|^8|^9|^10|^11|^12|^13
—
—
illuminate/support
Version 5.1.*|5.2.*|5.3.*|5.4.*|5.5.*|5.6.*|5.7.*|5.8.*|^6|^7|^8|^9|^10|^11|^12|^13
—
—

Weekly Downloads

Info

Last Published
23 days ago
Created
12 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform