refersonprado/order-custom-code

Maintainerscaution

One registry maintainer is consistent with an individually owned project, but it leaves the package dependent on a single publisher if that person becomes unavailable.

Release historycaution

All five releases were published within one day, followed by roughly eight months without a newer release. This suggests an unproven release pattern rather than established ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the past three months, despite a recent last push. That weakens evidence of continued maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a Magento module, that is a modest repository-hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This limits transparency around vulnerability reporting, though it does not by itself show that the package is unsafe to depend on.