Package Health/vulcandigital/silverstripe-currencyconversion

vulcandigital/silverstripe-currencyconversion

The package is clearly licensed, documented, and backed by an organization, with no install-time scripts or registry deprecation. Its maintenance record is nevertheless very weak, and the registry reports an older latest version than the release being assessed; pinning this release carries abandonment risk.

Latest 1.2.0

Packagist

38%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has only 3 releases, with no releases in the last 12 months, and its latest release was more than 8 years ago. This is strong evidence of abandonment risk despite the package remaining undepricated.

Repo commit activity

The repository has 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. No provided signal shows compensating current maintenance activity.

Repo popularity

The repository has 0 stars and 0 forks, with 1 watcher, providing little supporting evidence of broad adoption. Popularity is only supporting evidence, so this does not determine the verdict.

Repo tooling

Composer is used as a build tool, but no security-scanning tooling is present. This is a minor hygiene gap and does not by itself establish that the release is unsafe.

Security policy

The repository has no security policy. This is a transparency and reporting gap, although it is secondary to the much stronger evidence of prolonged inactivity.