aregowe/magento2-module-polyshell-protection

Project backingcaution

The package and repository are owned by the same individual account rather than an organization, so the single-contributor findings represent a genuine limited maintainer base.

Release historycaution

The package has 11 releases in about five months, with releases typically less than a day apart, showing strong recent publishing activity. Its short age limits evidence of long-term maintenance maturity.

Repo bus factorcaution

One contributor made all commits during the last three months, leaving maintenance dependent on a single active person. The recent release and documented contribution provide some evidence of engagement but do not remove this concentration risk.

Repo commit activitycaution

Only one commit was recorded in the last three months, despite the recent release history, so current development activity is thin and should be watched for signs of abandonment.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools are reported. This is a transparency and maintenance gap for a security-focused module, though it is not by itself evidence that the package is unsafe.