Package Health/sagardeveloper/sagar-custom-module-api

sagardeveloper/sagar-custom-module-api

The stable 1.0.0 release includes a usable README, an explicit GPL license, and only two runtime dependencies. There is no security policy or automated security scanning, leaving limited transparency for future maintenance.

Latest 1.0.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This package has only one release, published over five years ago, with no releases in the last 12 months. That strongly suggests abandonment risk for a Magento integration.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, while its last push was over five years ago. This is strong evidence that maintenance has stopped.

Repo package mention

The repository name does not match the package name and its README does not mention the package, so the source may not clearly belong to this release. That weakens transparency.

Repo tooling

Composer is used for the project, which supports reproducible package management, but no security scanning tools are configured. The missing scanning is a modest maintenance and assurance gap.

Security policy

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a genuine transparency gap, though not evidence of maliciousness.