selveq/catalog-graphql

Dependency profilecaution

The module declares 32 runtime dependencies and no development dependencies, indicating a broad Magento integration footprint and potentially higher upgrade coupling. That is understandable for a Catalog GraphQL extension but remains a maintenance consideration.

Release historycaution

The package is 0 days old, with 139 releases all published within the last 12 months and a median interval of 0 days. That unusual same-day history provides little evidence of an established release process.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers over the past three months. Because the package is newly published this may reflect its age, but it leaves ongoing maintenance unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For an extension that changes product and search GraphQL behavior, the absence reduces transparency around reporting and handling vulnerabilities.