econt-express/magento2-delivery

Licensecaution

The artifact and repository contain a license file, but it is detected as MIT-0 while the manifest declares MIT; that mismatch creates a real licensing transparency concern.

Release historycaution

Nine releases arrived over about 19 days, showing initial publishing activity, but the short history provides limited evidence of long-term maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance and abandonment concern for an integration module.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the package-to-source relationship is not clearly demonstrated.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was observed; this is a modest transparency and maintenance gap rather than a severe risk.