james-and-james-fulfilment/amazon-sp-api

Licensecaution

The manifest declares the package as proprietary and no license file was found, which creates a meaningful licensing and transparency concern for an open-source dependency.

Release historycaution

The package has only 5 releases over about 4.5 years, with one release in the last 12 months and a median interval of about 191 days. The recent release is reassuring, but the overall cadence is limited.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last 3 months. Although the recent release shows some activity, the current lack of development activity is a maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and process gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear for a package that handles marketplace API credentials and data.