Package Health/silverstripe/vendor-plugin

silverstripe/vendor-plugin

Usable with caveats: this is a mature, organization-backed plugin with tests, a matching repository, and a documented stable release. Maintenance has gone quiet, with no registry release in the last 12 months and no commits in the last 3 months, so verify that it still fits your needs before adopting it.

Latest 3.0.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2017 with 27 releases, but it has had no release in the last 12 months; that is a meaningful sign of slowing maintenance, though the project has a long release history.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last 3 months. The August 2025 push shows it was not permanently abandoned, but current maintenance capacity is uncertain.

Repo issue activity

There are five open issues and one open pull request, but none were created or closed in the last month, consistent with the broader signs of limited recent activity.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a severe risk for this small plugin.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a hygiene concern, partly offset by the absence of dangerous workflow patterns.