thelia/product-upsell-module
The package includes a README, release notes for this version, a declared LGPL license, and only one runtime dependency. It has no install scripts or workflow findings, but the long period without releases leaves ongoing compatibility and maintenance uncertain.
42%
Total Score
100
100
63
75
Health Score Breakdown
The package has had only 3 releases, all concentrated on 17 May 2020, with no release in more than 6 years. This is strong evidence of abandonment risk despite the package remaining undeclared as deprecated.
The repository has 0 stars and 0 forks, with 5 watchers. Popularity is only supporting evidence, but these numbers provide little evidence of a broad external maintenance base.
The repository uses Composer, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than proof of an unsafe release.
The linked repository is not archived, so it has not been explicitly retired. Its last push was in May 2020, however, which is consistent with the stale release history.
No security policy was found in the repository. This weakens vulnerability-reporting transparency, especially for a package whose maintenance activity already appears dated.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 thelia/installer Version ~1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.