thelia/extra-order-data-module

Release historydanger

The package has only two releases, with the latest published in 2015 and none in the last 12 months. That long registry gap is a meaningful maintenance concern, although the repository was updated later.

Repo popularitycaution

The repository has zero stars and one fork, indicating very limited visible adoption. Popularity is supporting evidence rather than a verdict, but this offers little external maturity signal.

Repo toolingcaution

Composer is used for builds, but no security scanning tools are configured. For a small PHP module this is a hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, though the absence alone does not show that the package is unsafe.

Workflow auditcaution

The sole workflow was fully analyzed with no audit findings or untrusted checkout paths, but its one action use is unpinned. The missing top-level permissions block is acceptable on its own, while the unpinned action is a modest reproducibility concern.