Package Health/trustpilot/module-reviews

trustpilot/module-reviews

The package includes installation guidance and release notes for this version. Its organization-owned repository is not archived, but it has no recent commits, issue movement, or security scanning; the license mismatch also needs clarification.

Latest 2.6.580

Packagist

43%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 58 releases and historically released about every 12 days, but its latest release was in January 2023 and there were no releases in the last 12 months. That long gap materially raises abandonment risk.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence that maintenance has stalled.

License

A license file is present in the artifact and repository, but the manifest declares OSL-3.0 while the detected file is MIT. The package is licensed, yet the mismatch creates a material compliance ambiguity.

Repo issue activity

There were no new or closed issues and no merged pull requests in the last month, while 15 issues and 3 pull requests remain open. This suggests unresolved maintenance needs and limited current attention.

Repo tooling

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools were detected. That weakens development hygiene without proving the release is unsafe.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
psr/log Version >=1.0.0	—	—
magento/framework Version >=100.0.20	—	—
magento/module-eav Version >=100.0.12	—	—
magento/module-sales Version >=100.0.16	—	—
magento/module-store Version >=100.0.9	—	—