diglin/orocommerce-auto-customergroup-assignment

Release historycaution

The package has had no registry release for more than three years, despite five releases overall; this is a meaningful maintenance concern for a platform integration.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which weakens evidence of active maintenance; the recent repository push provides only partial compensation.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tool is present. For this small PHP bundle, that is a modest transparency and hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unspecified. This is a minor transparency gap, not evidence of unsafe code.