bricre/amazon-selling-partner-sdk-catalog-items

Release historycaution

Only two releases are recorded, with none in the last 12 months and the latest release about five years ago. This is a substantial maintenance concern for an API client tied to an evolving external service.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has gone quiet. The repository is not archived, but that does not compensate for the prolonged inactivity.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. For a generated API client this is a modest assurance gap, not a severe risk by itself.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.