mdoq/module-connector

Release historycaution

The package has 35 releases since January 2019, but none in the last 12 months; the latest release was over a year ago, indicating a meaningful maintenance pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Its last push coincided with the latest release, so there is no recent evidence of ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, which weakens confidence that the linked source repository is specifically maintained for this release.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. That leaves a useful supply-chain hygiene gap without outweighing the package's valid source and release history.

Security policycaution

The linked repository has no security policy. This is a transparency gap for a Magento integration package, though it does not by itself show that the release is unsafe.