Package Health/shopmonkeynl/shopmonkey-cli

shopmonkeynl/shopmonkey-cli

This is a usable, actively published CLI with a stable major version, no registry deprecation, a clear MIT declaration, a small runtime dependency set, and organization-backed source repository evidence. However, maintenance activity is uneven: the repository shows no commits or active maintainers in the last 3 months, the project has no tests or changelog, and it lacks security scanning and a security policy. The latest release and repository push are very recent, which partly offsets the low recent commit activity, but the thin contributor and verification signals warrant caution before adopting it as a critical dependency.

Latest v3.4.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A 1285-character README documents installation and commands, but neither the artifact nor repository contains tests or a changelog. For a small CLI this is a genuine transparency and verification gap, though GitHub Releases provide some compensating release documentation.

Repo commit activity

There were 0 commits and 0 active maintainers in the last 3 months, which is a meaningful maintenance-risk signal. The very recent repository push and release partly compensate, but do not establish sustained activity.

Repo issue activity

The repository has 8 open issues and 3 open pull requests; although no new issues or pull requests appeared in the last month, 2 pull requests were merged during that period. This indicates some recent maintenance but not consistently active issue handling.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. The absence of scanning lowers supply-chain transparency, though it is not by itself evidence that the package is unsafe.

Security policy

The repository has no security policy. This weakens vulnerability-reporting transparency, particularly for a CLI that handles authentication and theme synchronization.