adnduweb/ci4_ecommerce

Release historydanger

The package has had no release in about six years, despite 11 releases earlier in its history. That long pause is strong evidence of abandonment risk for an ecommerce dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, confirming that the long release gap reflects inactive development rather than only delayed publishing.

Lifecycle scriptscaution

The package declares a post-update-cmd lifecycle script, so dependency updates can execute package-defined behavior. This is a modest supply-chain hygiene concern, not a verdict on package health by itself.

Maintainerscaution

Only one registry maintainer is listed, so publishing and maintenance capacity appear concentrated in a single person. The repository is user-owned rather than organization-backed, which provides no visible compensation for that concentration.

Repo package mentioncaution

The repository name matches the package, but its README does not mention the package name. This weakens package-to-source transparency, even though the matching repository name is a compensating signal.