Package Health

swordfox/silverstripe-shopify

Usable with caveats: the package is licensed, clearly backed by its matching repository, and has a stable release history, but maintenance appears to have stalled. There have been no releases in over a year, no commits in the last three months, and no security policy or scanning setup.

Latest 1.4.0.8PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

81

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Health Score Breakdown

Release historycaution

The package has 63 releases since June 2020, but none were published in the last 12 months and the latest release was in July 2025, indicating a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months; together with the extended release gap, this points to stalled maintenance.

Repo issue activitycaution

Six issues remain open, with no issues or pull requests opened or closed in the last month, providing little evidence of active issue resolution.

Repo popularitycaution

The repository has only 2 stars, 3 forks, and 2 watchers. This is weak supporting evidence for project reach, though low popularity alone does not make a small stable package unhealthy.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-process gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Graham McLellan

Direct Dependencies

DependencyLast ReleaseScore
silverstripe/cms
Version ^4 || ^5
—
—
guzzlehttp/guzzle
Version *
—
—
composer/installers
Version *
—
—
silverstripe/framework
Version ^4 || ^5
—
—
symbiote/silverstripe-gridfieldextensions
Version ^3 || ^4
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform