scandipwa/catalog-customer-graphql

Release historydanger

Only two releases exist, and none were published in the last four years; the latest release was in June 2022. This is strong evidence of limited ongoing maintenance for a dependency.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no observed recent work to offset the inactivity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap, not a standalone dependency risk.

Security policycaution

The repository has no security policy. For a small extension this is a limited transparency gap, though it provides no documented channel for reporting vulnerabilities.