dhruvi/module-hello-world

Release historydanger

This is the only release, published about 5 years and 4 months ago, with no releases in the last 12 months. That strongly suggests the package is unmaintained, although its stable version reduces compatibility uncertainty.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the release history showing no activity since June 2021. No stronger maintenance signal compensates for this inactivity.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package. For a small standalone Magento module, that raises concern that the repository may not be the package's actual source.

Repo toolingcaution

Composer is used as the build tool, which supports a conventional package structure, but no security scanning tools are present. That modestly reduces supply-chain oversight.

Security policycaution

The repository has no security policy. This is a transparency and response-process gap, though it is less serious than the long maintenance hiatus.