test-magenx/module-eav

Release historydanger

The package has had no release in nearly five years: its latest release was October 11, 2021, with zero releases in the last 12 months. This is strong evidence of abandonment for a dependency despite the six-release history.

Repo issue activitycaution

The repository has no open issues or pull requests and recorded no issue or pull-request activity in the last month. With the repository last pushed in 2021, this reinforces the lack of current maintenance.

Repo popularitycaution

The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but this very small public footprint provides little evidence of external review or adoption.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem. No security-scanning tools are configured, leaving less evidence of automated vulnerability oversight for a package with many runtime dependencies.

Security policycaution

The repository has no security policy. This is a transparency and maintenance gap, especially alongside the absence of security-scanning tooling, though it is not evidence that the package is malicious.