goldencodeio/restify-shop

Release historycaution

The package has had only three releases, all effectively at its first publication in April 2019, with no releases in the last seven years. This is strong evidence of abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no current maintenance.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so package ownership and source-to-artifact traceability are less clear.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. That weakens automated maintenance hygiene for a package exposing REST functionality.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency gap, though it is not evidence that the package is malicious.