Package Health

stefandoorn/sitemap-plugin

Usable with caveats: the package is licensed, tested in its repository, non-archived, and has release notes for v3.0.0. However, it has had no registry release in the last 12 months and no commits or active maintainers in the last three months, so verify ongoing maintenance before adopting it.

Latest v3.0.0PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

70

Health Score Breakdown

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months. This is the strongest maintenance concern, particularly alongside the absence of registry releases in the last 12 months.

Lifecycle scriptscaution

Composer install, update, and project-creation lifecycle scripts are present. Their presence adds some installation-time complexity, although no dangerous behavior is shown by this signal alone.

Release historycaution

This is a mature package with 47 releases since 2017, but it has had no registry releases in the last 12 months despite a historical median interval of about 20 days. That slowdown is a meaningful maintenance concern.

Repo issue activitycaution

The repository still has open issues and pull requests, and one new pull request appeared in the last month, but no pull requests were merged and no issues were closed during that period. This indicates limited recent throughput.

Security policycaution

The repository has no SECURITY.md or equivalent security policy. This is a transparency gap, though it is less severe than evidence of abandoned source activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
sylius/sylius
Version ^2.0
—
—
league/flysystem-bundle
Version ^3.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
9 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform