Common components for Omniship shipping processing library
58%
Total Score
50
71
50
The package includes a readable README, and the absence of tests or a changelog in the published artifact is normal packaging practice rather than a health gap. Repository-level test and changelog indicators are also false, so there is no testing or release-documentation evidence to add.
The package has 24 releases but none in the last 12 months, and its latest registry release was in September 2019. This long release gap is a meaningful maintenance concern, though the linked repository was pushed more recently.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This may reflect a quiet, stable project, but together with the old registry release it provides little evidence of active maintenance.
Composer is used for the build, which is appropriate for this PHP package, but no security-scanning tooling is reported. That leaves a verification gap for ongoing dependency and source health.
The repository has no formal security policy. The README provides an email contact for security reports, which partially compensates for the missing policy but offers less structured disclosure guidance.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/intl Version ^2.1|^3.1|^4.3@dev | — | — |
nesbot/carbon Version ^1.20|^2.0 | — | — |
guzzlehttp/psr7 Version ^1.5@dev | — | — |
guzzlehttp/guzzle Version ^6.3@dev | — | — |
crisu83/php-conversion Version ^0.5|dev-master | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.