hardman-commerce/magento2-fixtures

Release historycaution

The package has only two releases over about 13 months, with one release in the last 12 months and a median interval of about 162 days. That is limited evidence of maturity and sustained maintenance.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with the sparse release history, this weakens confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a development fixture library this is a modest repository-hygiene gap, not evidence of abandonment by itself.

Security policycaution

No security policy was found in the repository. This reduces transparency around vulnerability reporting, although it is less material for a test-fixture package than for a production-facing service.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 8 action references are unpinned, which leaves avoidable build-integrity risk.