test-magenx/module-graph-ql

Release historydanger

The package has only four releases, all concentrated around October 2021, with no release in the last 12 months. This indicates a strong abandonment risk despite the package not being deprecated.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tooling was detected. The missing scanning evidence is a modest supply-chain hygiene concern.

Repository archivedcaution

The repository is not archived, but its last push was in October 2021, matching the stale registry history. That reduces confidence in ongoing maintenance even though the repository remains available.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but not severe enough to determine the score alone.