scandipwa/wishlist-graphql

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating substantial abandonment risk.

Dependency profilecaution

The package declares ten runtime dependencies, including several Magento modules and a ScandiPWA performance package. This is substantial ecosystem coupling, increasing upgrade compatibility risk even though the dependencies are relevant to the package's GraphQL integration.

Release historycaution

The package has 26 releases since May 2019, but none in the last 12 months; the latest release was over three years ago. This indicates a potentially stable but currently unmaintained dependency.

Repo popularitycaution

The repository has only 3 stars and 13 forks, showing limited community visibility. Popularity is supporting evidence rather than decisive, so this adds only a modest concern beside the stronger inactivity signal.

Repo toolingcaution

Composer is used as the build tool, appropriate for this PHP package, but no security scanning tooling is present. The missing scanning is a transparency gap rather than proof of a defect.