php-cuong/magento2-product-question-and-answer

Release historydanger

The package has had only two releases, with the latest published about 8 years and 10 months ago and none in the last 12 months. This is strong evidence of abandonment risk for a Magento extension.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, despite being unarchived. That indicates current maintenance has effectively stopped.

Maintainerscaution

Registry publishing access is held by one person, which gives the project a thin publishing base. The individual-owned repository is consistent with this, but offers little resilience if that maintainer becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are configured. For a Magento module that handles customer questions and answers, this reduces visible maintenance safeguards.

Security policycaution

The repository has no security policy, so users have no documented security-reporting path. This is a transparency and maintenance gap, though it is not evidence that the package is malicious.