Package Health

thelia/thelia-blocks-module

This is a generally healthy, actively maintained release: the package has existed for about 4 years and 10 months, has 45 releases including 6 in the last 12 months, is on a stable non-prerelease version, is not deprecated, and its repository is active and not archived. The main concerns are a highly concentrated contributor base, no repository tests or changelog, absent security policy and security scanning, workflows without top-level token permissions, and a repository that neither matches the package name nor mentions it in its README. These issues warrant review before adoption, but the strong release cadence, recent commits, organization backing, and clean workflow-risk findings make the package a reasonable dependency rather than an abandonment concern.

Latest 3.1.1PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

78

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

80

Health Score Breakdown

Package scaffoldingcaution

The package has a substantial README, but neither the artifact nor repository contains tests or a changelog. The README documents module architecture and usage, yet the missing validation and change-history artifacts reduce transparency.

Repo bus factorcaution

Two contributors were active, but the top contributor made 13 of 14 commits, or about 93%. The organization backing provides some handoff capacity, yet current activity remains highly concentrated.

Repo issue activitycaution

There are 16 open issues, no new or closed issues in the last month, and 4 pull requests merged in that period. Recent merge activity is positive, but the unresolved issue backlog and lack of issue movement warrant some caution.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty that the linked repository is the canonical source for this release. Organization ownership and the substantial matching module file tree provide some context but do not remove the transparency gap.

Repo popularitycaution

The repository has only 3 stars and 7 forks, indicating limited visible adoption. Popularity is supporting evidence rather than a verdict, so this is not a major health failure.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
thelia/installer
Version ^1.6
—
—
thelia/short-code-module
Version ^3.0
—
—
thelia/thelia-library-module
Version ^2.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
4 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform