test-magenx/module-webapi-security

Release historydanger

The package has had no release in nearly five years, with only four releases and none in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo popularitycaution

The repository has zero stars and forks and one watcher, providing little community evidence to support ongoing maintenance. Low popularity is supporting caution, not proof that the package is unsafe to adopt.

Repo toolingcaution

Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. The missing scanning reduces supply-chain transparency modestly.

Security policycaution

The repository has no security policy. For a module explicitly concerned with Web API access controls, this is a meaningful transparency and vulnerability-response gap.

Version stabilitycaution

The release is a stable major version and has no prerelease history, which supports maturity. However, the registry reports 100.3.4 as the latest version while this assessment concerns 100.4.1, creating a minor consistency concern.