space-invoices/apollo-magento

Release historydanger

The package has only one release, published over seven years ago, with no releases in the last 12 months. This is strong evidence that development has stopped.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Licensecaution

The manifest declares Apache-2.0 and the artifact contains license files, but the detected license text is MIT and comes from bundled vendor dependencies. The differing detected license is a transparency caution even though the release is licensed.

Repo toolingcaution

Composer is used for the build, which is appropriate for a PHP package, but no security-scanning tools are configured. This is a minor hygiene gap rather than a standalone dependency blocker.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a transparency concern for a package that handles invoice data.