risecommerce/magento-2-email-attachments-extension

Licensecaution

The artifact includes a license file, but it identifies GPL-3.0 while the manifest declares OSL-3.0 and AFL-3.0. This mismatch needs clarification before relying on the package.

Release historycaution

The package has only three releases and none in the last 12 months; the latest release was over two years ago. The linked repository was pushed more recently, which partly offsets but does not remove the release-maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed more recently, the current absence of activity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.