serfe/taxjar-magento2-extension

Release historycaution

The package has 66 releases overall, but none in the last 12 months; its latest release was over a year ago. The concentrated release history provides useful maturity evidence but does not offset the current inactivity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is consistent with the lack of recent releases and raises maintenance risk.

Security policycaution

The repository has no security policy. For an extension that handles tax-service integration, this reduces transparency around vulnerability reporting, though it is not evidence of a vulnerability by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its 2 action references are unpinned. That leaves avoidable build-supply-chain hygiene risk.