panix/mod-shop

Project backingcaution

The package is published under a registry namespace while the linked repository is owned by an individual account. The repository linkage is concrete, but the signals do not show organizational backing that would offset the thin activity record.

Release historycaution

The package has 16 releases since September 2017, but its latest registry release was in October 2022 and there were no releases in the last 12 months. This is a meaningful maintenance concern for a dependency, although the linked repository was pushed in August 2025.

Repo commit activitycaution

No commits were recorded in the last three months and no maintainers were active in that period. The August 2025 push is compensating evidence of more recent activity, so this lowers confidence without proving abandonment.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these figures provide little external evidence of adoption or review.

Repo toolingcaution

The repository uses Composer build tooling, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a hygiene gap rather than a severe dependency risk by itself.