stefandoorn/google-tag-manager-plugin
The repository has tests, a clear README, and a license, while no security policy is published. The automated workflow also has low-confidence cache warnings, so CI hygiene is not ideal.
58%
Total Score
50
100
88
50
Health Score Breakdown
The registry namespace and repository are owned by the same individual, providing consistent ownership context but no organizational backing to offset a thin maintainer base.
The package has existed since 2017 with 14 releases, but it has had no registry release in roughly 18 months and none in the last 12 months, indicating slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. This is the strongest maintenance warning, although the recent repository push provides limited compensating evidence.
There were no new or closed issues or pull requests in the last month, while 10 pull requests remain open, suggesting limited recent project interaction.
No repository security policy was found, reducing transparency for reporting vulnerabilities, though this is a moderate hygiene gap rather than evidence of abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ^2.0 | — | — |
xynnn/google-tag-manager-bundle Version ^3.2 || ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.