selveq/catalog-customer-graphql

Release historycaution

The package was first released today and has three releases in its first day, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months; because the repository is brand new, this is not evidence of abandonment, but maintenance capacity remains unproven.

Repo toolingcaution

Composer build tooling is present, but no repository security-scanning tools were detected. For a small new module this is a hygiene gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This limits transparency about vulnerability reporting and handling, although the package's small scope and clear documentation partly reduce the concern.