scandipwa/catalog-graphql

Release historycaution

The package has a substantial history of 138 releases over about 7.5 years, but it had no releases in the last 12 months and its latest release was in July 2024, indicating a significant maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and raising abandonment and support concerns.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected; this is a transparency and maintenance gap, though it is less serious than the prolonged lack of development activity.

Repository archivedcaution

The linked repository is not archived, but its last push was in July 2024, so the unarchived status does not offset the evidence of prolonged inactivity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting expectations unclear; this lowers transparency but is not by itself evidence that the package is unsafe.