liip/magento-order-email-jsonld

Release historydanger

The package has had no release in more than 8 years: its latest release was October 31, 2017, and it has had none in the last 12 months. This is strong evidence of abandonment despite four total releases.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with its last push occurring in October 2017. There is no provided evidence of current maintenance capacity.

Package scaffoldingcaution

The package includes a README, but it contains only 28 characters and offers little consumer guidance. Missing tests and a changelog are normal for published artifacts, while the GitHub release history provides some release transparency.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small extension this is a modest assurance gap, not evidence of maliciousness or an unsafe dependency by itself.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities. This adds a transparency and maintenance concern, although it is less severe than the prolonged inactivity.