shopwell/core
The large runtime dependency set raises upgrade and maintenance burden. Organization backing, tests, a matching repository, and an explicit license provide useful support.
58%
Total Score
50
50
71
83
Health Score Breakdown
The registry shows only one release, published 0 days ago, so there is no demonstrated release history or cadence yet.
The repository records 0 commits and 0 active maintainers over the last three months, leaving current maintenance capacity unproven.
The package declares 124 runtime dependencies, creating a substantial upgrade and compatibility surface for consumers.
The artifact declares Apache-2.0 and includes license files, but the detected files also identify MIT, which does not fully match the declaration.
Composer is used for the build, but no security scanning tools were detected, leaving a repository hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mcp/sdk Version ^0.8.1 | — | — |
psr/log Version ^3.0.0 | — | — |
psr/cache Version ^3.0.0 | — | — |
psr/clock Version ^1.0.0 | — | — |
twig/twig Version ^3.29.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 hours ago
- Created
- 5 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.