test-magenx/module-vault-graph-ql

Release historydanger

The package has only 3 releases, all clustered in October 2021, and none in the last 12 months despite being about 5 years old. This is strong evidence of abandonment risk.

Repo package mentioncaution

The repository name matches the package, which supports ownership, but the README does not mention the package name. Because the match is otherwise direct, this is only a minor documentation concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are reported. This is a modest transparency and maintenance concern, not evidence that the package is unsafe by itself.

Repository archivedcaution

The repository is not archived, which is a positive sign, but its last push was in October 2021 and does not offset the prolonged inactivity shown by the release history.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This adds a transparency gap, especially alongside the stale maintenance record.