picqer/magento2-plugin

The package is small and clearly documented, with an MIT license and release notes for this version. Its narrow dependency set and organization ownership help, but maintenance and security follow-up appear limited.

Latest 1.0.3

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has had four releases since April 2019, but none in the last 12 months; its latest release was over four years ago. This indicates materially slowed maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful abandonment concern, although it is partly expected for a small, mature integration.

Repo issue activity

There were no new or closed issues or pull requests in the last month, and one pull request remains open. This provides little evidence of ongoing maintenance.

Repo tooling

The repository uses Composer, but no security scanning tools were detected. That is a hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. For an integration package handling webhooks and connection credentials, this reduces transparency around vulnerability reporting.