Package Health

sunnysideup/ecommerce_quick_add

It has a clear README, changelog, repository tests, a BSD-3-Clause license, and no install-time scripts. Its small dependency set lowers integration risk, but compatibility with the current Silverstripe stack should be checked carefully.

Latest 1.2.5PackagistPackagist

43%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

25

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

75

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historydanger

The package has had no registry release in more than eight years, despite eight releases overall and a previously regular cadence. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided maintenance signal compensates for this.

Repo issue activitycaution

There are four open pull requests, with no new or merged pull requests in the last month. This suggests unresolved maintenance work, though the absence of open issues limits the concern.

Repo popularitycaution

The repository has one star, one fork, and one watcher. Low popularity is only supporting evidence, but it provides little external evidence of sustained use or review.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This is a transparency and maintenance gap, not evidence of malicious behavior.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Nicolaas Francken

Direct Dependencies

DependencyLast ReleaseScore
silverstripe/cms
Version ~3.6
—
—
sunnysideup/ecommerce
Version *
—
—
silverstripe/framework
Version ~3.6
—
—

Weekly Downloads

Info

Last Published
8 years ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform