innosend/magento2-pickup-points

Dependency profilecaution

Seven runtime dependencies are appropriate for a Magento checkout module, though the package is coupled to Magento components and two Innosend modules, increasing upgrade coordination needs without making it unfit to use.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. The recent release and push compensate for possible inactivity immediately around the scan, but do not establish sustained maintenance capacity.

Repo popularitycaution

The repository has only 2 stars, 2 forks, and 0 watchers. Popularity is supporting evidence rather than a verdict, but these low numbers provide little external adoption or review signal.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured, leaving a security-hygiene gap for a package used in a checkout and order-processing context.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and coordinated remediation.