bold-commerce/adobe-commerce-bold-checkout

Registry deprecationdanger

Packagist marks the entire package as abandoned and names bold-commerce/module-checkout as its replacement. This is a severe adoption risk even though the assessed version is stable.

Release historycaution

The package has 51 releases since July 2023, but none in the last 12 months and its latest release was in March 2025. The earlier regular cadence does not compensate for the extended release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This indicates current maintenance has stopped or is not visible, despite the separate recent repository push timestamp.

Security policycaution

The linked repository has no security policy. For a checkout integration handling payment-related flows, this is a meaningful transparency gap.

Token permissionscaution

Two of three workflows declare no top-level permissions, and one release workflow requests top-level write access. The workflow-risk scan found no dangerous checkout or script-injection patterns, but the permission posture is not minimal.