Package Health/zero1/open-pos-default-theme

zero1/open-pos-default-theme

This is a usable but relatively young package with a clear license, stable non-prerelease version, no registry deprecation, an unarchived repository, a small runtime dependency surface, and an organization-owned source project. The main concerns are limited release history, only one commit from one active contributor in the last three months, no tests or changelog, no security policy, and no security-scanning tooling; the organization backing partly mitigates the concentrated bus factor, but the package still has less demonstrated maintenance depth and transparency than a mature dependency.

Latest 2.3.0

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Package scaffolding

A README is present and GitHub Releases are used, but the artifact and repository contain no tests or changelog. For a theme package this is a meaningful transparency gap, although the absence of tests is less concerning than it would be for a logic-heavy library.

Release history

The package is only 215 days old and has two releases, with a median interval of about 216 days. This provides limited evidence of sustained release maintenance.

Repo bus factor

One contributor made all commits in the last three months, creating a concentrated maintenance dependency. The organization-owned repository provides some mitigation because maintenance can potentially be handed off internally.

Repo commit activity

Only one commit was recorded in the last three months, indicating limited recent maintenance activity.

Repo tooling

Composer is used as a build tool, but no security-scanning tools are configured. The missing security tooling lowers transparency around automated checks, though it is not by itself evidence of an unsafe release.