test-magenx/module-usps

Release historydanger

The package has had no release in nearly five years, with only four releases overall and none in the last 12 months. This is strong evidence of abandonment for a maintained integration module.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, providing little evidence of community adoption or external maintenance support.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools are configured. That weakens transparency and detection capacity, though it is not evidence of a malicious package.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a maintenance and transparency gap rather than a standalone reason to reject the package.

Version stabilitycaution

The assessed version is 100.4.2, while the registry reports 100.3.4 as the latest version, creating uncertainty about release metadata and reproducibility despite the version being a stable major.