tecsecret/br_customer_attributes

Release historydanger

The package has had no release in more than seven years; its latest release was July 2019, with zero releases in the last 12 months. This is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The repository is not archived, but there is no recent maintenance evidence.

Licensecaution

The artifact includes a LICENSE file and the repository also has one, so licensing is documented. However, the manifest declares proprietary while the detected license is MIT, creating a meaningful license-interpretation mismatch.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a hygiene gap that adds concern alongside the package's long inactivity.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting vulnerabilities in a package that modifies customer and checkout data.