Package Health/storetown/module-product-attachments-pro

storetown/module-product-attachments-pro

The license is explicit, and the package includes a substantial README and release notes. No security policy or automated security scanning leaves the project’s maintenance and security practices less transparent.

Latest v1.0.0

Packagist

57%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Package file tree

The artifact and repository each contain only LICENCE, README.md, and composer.json, indicating a documentation or pre-sales listing rather than inspectable module source. This limits transparency for a dependency.

Release history

This is a young package with only one release, published about 99 days ago, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activity

The repository recorded no commits and no active maintainers in the last three months. That is concerning for a package whose registry history also contains only one release.

Repo package mention

The linked repository name does not match the package name and its README does not mention the package, so the repository’s relationship to this release is not independently clear.

Repo tooling

Composer build tooling is present, but no security scanning tools were detected. This is a modest process gap rather than evidence of an unsafe release by itself.