makaira/shopware5-connect

Release historydanger

The package has had no releases in more than three years, despite 39 releases since November 2021. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and weakening confidence in ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent than expected. Organizational backing partly offsets this, but does not resolve the mismatch.

Repo toolingcaution

The project uses Composer, providing build tooling, but no security-scanning tools were detected. The missing scanning is a minor process gap for a package with no recent activity.

Security policycaution

The linked repository has no security policy. This reduces disclosure transparency, although it is not by itself evidence that the package is unsafe.