Package Health

therealworld/theme-module

This is a mature and actively released package: it has existed for over 8 years, has 62 releases including 14 in the last 12 months, and the current version is a stable non-prerelease release. It is not deprecated, has no install-time lifecycle scripts, and its modest three-runtime-dependency profile is understandable for an OXID eShop theme/build module. The main concerns are the mixed GPL-3.0-only/proprietary license declaration, absent packaged tests and changelog, and the lack of a declared source repository, which limits transparency and prevents verification of repository maintenance. Overall, it appears usable to depend on, but license compatibility and long-term maintenance should be confirmed with the publisher.

Latest v3.0.17PackagistPackagist

78%

Total Score

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

80

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Licensecaution

The manifest declares both GPL-3.0-only and proprietary licensing, which creates meaningful downstream licensing ambiguity; however, a license is declared rather than being entirely absent.

Package scaffoldingcaution

The artifact includes a substantial README describing requirements, build commands, and project structure. Tests and a changelog are absent, but this is a focused theme/SCSS build module, so those omissions are maintenance gaps rather than severe evidence of abandonment.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
oxid-esales/oxideshop-ce
Version >=v7.4
—
—
therealworld/tools-plugin
Version >=v3.2
—
—

Weekly Downloads

Info

Last Published
24 days ago
Created
8 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform