softcode/module-checkout-override

Release historycaution

This is the package's first release, published 0 days ago, so there is no release track record yet. That limits evidence of maintenance and compatibility over time.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months, but the package is only 0 days old, so this mainly reflects limited history rather than established abandonment.

Repo popularitycaution

The repository has 0 stars and 1 fork, indicating little external adoption so far. Because the package is newly published, this is supporting context rather than evidence of abandonment.

Repo toolingcaution

Composer is used as the build tool, which fits this package, but no repository security-scanning tools were detected. This is a modest transparency and hygiene gap, not a severe risk.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or audit findings, but all 4 action references are unpinned. The lack of a top-level permissions block is acceptable on its own.