reach-digital/magento2-vendit

Licensecaution

The package declares no license, contains no license file, and the repository has no license file. That leaves usage and redistribution rights unclear for a Magento integration.

Repo bus factorcaution

One contributor made all 8 commits in the last 3 months, creating a high single-maintainer dependency. Organization ownership provides some handoff potential, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 8 commits in the last 3 months, showing recent maintenance. All activity comes from one maintainer, so ongoing maintenance capacity is limited.

Repo toolingcaution

The repository uses Composer for builds, which fits the package ecosystem, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. For an integration that handles orders, customers, inventory, and webhooks, the absence of a documented vulnerability-reporting process lowers operational maturity.