justpush/magento-module-notify

Release historycaution

This is a newly published package, released today with two releases and no established release interval, so long-term maintenance cannot yet be demonstrated.

Repo commit activitycaution

The repository has zero commits and zero active maintainers in the last three months. Because the package is only newly published, this is limited evidence of abandonment but still leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no SECURITY policy. This weakens vulnerability-reporting transparency, though it is not by itself evidence that the package is unsafe.