multidimensional/oauth2-shopify

Release historycaution

The package is mature, but it has only three releases and none in the last 12 months; the latest release was about 19 months ago. This indicates a slow maintenance cadence, though the package may be intentionally stable.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Combined with the long release interval, this raises maintenance and abandonment risk.

Repo toolingcaution

The project uses Make and Composer for builds, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern.

Security policycaution

The repository has no security policy. For an OAuth provider, the absence of a documented vulnerability-reporting path is a meaningful transparency gap.

Workflow auditcaution

The workflow audit completed successfully and found no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, leaving the build exposed to action changes over time.