thelia/stock-on-order-module

Licensecaution

The manifest declares GPL-3.0-or-later, while the artifact license file is detected as LGPL-3.0; the release is licensed, but the mismatch needs clarification.

Release historycaution

The package has existed since August 2015 and released version 3.0.0 in August 2026, but only one release arrived in the last 12 months and the median interval is about 2.8 years.

Repo bus factorcaution

All three recent commits came from one contributor, leaving maintenance dependent on a single active person; organization ownership offers some handoff capacity but no second active contributor is shown.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving repository security checks less transparent.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.