drupal-developer/web_store

Release historydanger

The package has had no releases in roughly four and a half years, despite 11 releases during its earlier development. That long gap is substantial abandonment evidence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history showing no release for roughly four and a half years.

Repo toolingcaution

Composer is used as a build tool, which supports reproducible package management, but no security scanning tools were detected. The missing security tooling lowers transparency for a package handling commerce functionality.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it does not by itself show the package is unsafe.