onepica/avatax

Release historydanger

The package has 99 releases since 2015, but none in the last 12 months and its latest release was about six years ago. This strongly indicates abandonment risk despite its historically active release cadence.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since the latest release. This is strong evidence that fixes and compatibility work may have stopped.

Lifecycle scriptscaution

The package runs post-install and post-update scripts, which can perform actions during dependency installation. These scripts are not inherently unsafe, but they increase supply-chain and installation review requirements.

Repo issue activitycaution

There were 25 open issues and 5 open pull requests, with no new or closed issues or pull requests in the last month. The unresolved backlog and lack of recent movement add maintenance concern.

Security policycaution

The repository has no security policy. For an extension handling tax-service integrations and customer transaction data, this reduces transparency around vulnerability reporting.