Package Health/sioweb/oxid-metadata-multi-select

sioweb/oxid-metadata-multi-select

The README gives a concrete integration example, and the package has no install-time scripts. Its license declaration conflicts with the detected LGPL-3.0 text, while the repository does not identify or mention this package. The lack of security tooling adds further transparency concerns.

Latest 1.1.1

Packagist

35%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

License

The artifact contains a license file, but it is detected as LGPL-3.0 while the manifest declares GPL-3.0-only. The mismatch creates licensing uncertainty despite the presence of licensing text.

Release history

The latest release was published in July 2020, with no releases in the last 12 months. This long period without updates is a substantial abandonment concern for a dependency.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months, consistent with the package's long release gap. This weakens evidence of ongoing maintenance.

Repo package mention

The repository name does not match the package name and its README does not mention the package. That raises concern that the linked repository may not clearly belong to this release.

Security policy

The repository has no security policy and no security-scanning tools. For a small package this is not decisive, but it reduces transparency around vulnerability handling.