softcommerce/module-core

Usable with caveats: it has frequent stable releases and an active, non-archived repository, but all recent commits come from one contributor. The repository also does not clearly identify this package and lacks security-policy coverage.

Latest 2.7.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

The artifact has a README and changelog, and the repository uses GitHub Releases, but neither the package nor repository contains tests. For a 205-file Magento module, that is a meaningful maintenance and regression-testing gap.

Project backing

The registry namespace is softcommerce, while the repository owner is the user account softcommerceltd rather than an organization. This provides some ownership linkage but limited evidence of institutional maintenance depth.

Repo bus factor

One contributor made 100% of the 8 commits in the last 3 months. Because project backing identifies a user-owned repository rather than an organization-owned one, there is no provided organizational compensation for this concentration.

Repo commit activity

There were 8 commits in the last 3 months, showing recent work, but only one active maintainer made them all. Activity exists, yet maintenance capacity is narrow.

Repo issue activity

The repository has 14 open issues but no new or closed issues and no pull-request activity in the last month. This is a modest concern about issue follow-through, though release activity compensates for some of it.