test-magenx/module-configurable-product-graph-ql

Release historycaution

The package has only 4 releases, all clustered around October 2021, with 0 releases in the last 12 months and a package age of about 5 years. This is strong evidence of abandonment risk despite the package not being deprecated.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. That weakens evidence of ongoing maintenance hygiene for a package whose repository has already gone quiet.

Repository archivedcaution

The repository is not archived, which avoids a severe abandonment signal, but its last push was in October 2021 and does not show continuing maintenance.

Security policycaution

The linked repository has no security policy. This is a transparency and reporting gap, although it does not by itself show that the package is unsafe to depend on.