elgentos/magento2-alternate-urls

Release historydanger

The package has had no release in more than three years, with no releases in the last 12 months. Four releases over its lifetime show some maturity, but the prolonged gap raises maintenance risk.

Licensecaution

The manifest declares a proprietary license, so the release is licensed, even though no license file was detected. The proprietary terms may require compatibility review, but this is not an unlicensed release.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are present. The build setup is ordinary, while the lack of scanning is a modest hygiene gap.

Security policycaution

The linked repository has no security policy. This weakens the project's disclosure and response transparency, though it is not evidence of unsafe code by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Its one action is unpinned, which leaves a small supply-chain hygiene gap; the absence of a top-level permissions block is acceptable on its own.