steverobbins/magescan

Release historycaution

The package has 59 releases since 2015, but its latest registry release was on February 14, 2019, with no releases in the last 12 months. This shows a mature history but substantial abandonment risk for a current dependency.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long gap since the latest release. This materially lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer and Box provide build tooling, but no security scanning tools were detected. Build support is positive, while the missing scanning is a minor oversight gap.

Security policycaution

The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a modest transparency and maintenance concern.