sellastica/catalog-supplier

Release historydanger

The package has 197 releases since July 2018, but the latest release was in January 2020 and there were no releases in the last 12 months. This long period without a release is a substantial abandonment risk.

Package scaffoldingcaution

The artifact contains no README, reducing consumer transparency for a library with many domain-specific classes. Missing tests and a changelog are expected packaging gaps and do not independently lower the score.

Repo toolingcaution

Composer is used as a build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance concern, especially for a package that has been inactive for years.

Repository archivedcaution

The repository is not marked archived, which is a positive counter-signal, but its last push was in January 2020 and does not offset the prolonged release inactivity.