Package Health

shopper/ups

The MIT license, focused six-file package, and lack of install-time scripts reduce adoption and supply-chain friction. Organization ownership provides some handoff capacity, but longer-term maintenance and security practices remain unproven.

Latest v3.0.0-rc.1PackagistPackagist

55%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Release historycaution

The package was published today and has only one release, so there is no track record for judging maintenance consistency or release reliability.

Repo bus factorcaution

One contributor accounts for all observed commits. Organization ownership offers some ability to hand off maintenance, but no second active contributor is evidenced.

Repo commit activitycaution

Only one commit was observed in the last three months, matching the package's very recent creation but leaving ongoing maintenance capacity unproven.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented for a package that handles shipping credentials and tracking integrations.

Version stabilitycaution

The assessed version is a prerelease, and all recent releases are prereleases; that is appropriate for early development but adds compatibility risk for consumers.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
shopper/core
Version self.version
illuminate/http
Version ^12.68|^13.27
shopper/shipping
Version self.version
illuminate/support
Version ^12.68|^13.27

Weekly Downloads

Info

Last Published
1 day ago
Created
1 day ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform