alexryall/reward-points

Package scaffoldingdanger

The package includes a short README, but it explicitly says the plugin is a proof of concept and not production ready; it also has no tests or changelog. The README is useful, but the missing test coverage materially limits confidence.

Release historydanger

The package has had only two releases, both in April 2020, with no releases in the last six years. This is strong evidence of abandonment for a production plugin.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the last push occurring in April 2020. This indicates no recent maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Although name differences can occur for subpackages, this weakens confidence that the linked repository is the package's clearly maintained home.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools are present. This is a maintenance and transparency gap rather than evidence of maliciousness.