drinks-it/mageplaza-module-product-alerts-graphql

Release historycaution

The package has had only two releases, both in September 2020, with no release in about six years. That long silence materially increases abandonment risk despite the package not being deprecated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided activity signal compensates for this lack of recent maintenance.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so the repository's ownership of this artifact is not clearly established. The organization backing reduces but does not remove that transparency concern.

Repo toolingcaution

The repository uses Composer build tooling, which fits the package ecosystem. No security scanning tools are configured, a minor hygiene limitation that is outweighed by the more substantial maintenance concerns.

Security policycaution

The linked repository has no security policy. For a Magento extension that handles product-alert and GraphQL functionality, this is a meaningful oversight gap, though it is not evidence of malicious behavior.