gladd/m2-dash-shortcuts

Release historydanger

The package has only one release, published about seven years ago, with no releases in the last 12 months. That is strong evidence of an inactive release process, although a small completed module may need few changes.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with no observed activity since September 2019. This materially raises abandonment risk.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, so installation can execute maintainer-provided actions. No accompanying workflow or provenance evidence is present to offset that operational concern.

Security policycaution

The linked repository has no security policy. For a small Magento module this is a transparency gap rather than a severe standalone risk, but it leaves vulnerability-reporting expectations unclear.