antom-magento/magento2

Release historycaution

The package is young, with two releases over 316 days and a median interval of about 101 days; this shows some delivery activity but limited history for judging long-term maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a meaningful warning that maintenance may have slowed after the latest release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap for a payment integration.

Security policycaution

The repository has no published security policy, making vulnerability reporting and coordinated response less transparent.

Workflow auditcaution

The single workflow was fully analyzed with no detected sinks or high-severity findings, but all three action references are unpinned, leaving workflow dependencies exposed to moving upstream code.