tig/module-magento2-connector-community

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement listed. Package-level abandonment is a severe dependency risk even though it does not by itself indicate malicious behavior.

Release historydanger

The package has five releases but none in the last 12 months; its latest release was in December 2022, roughly three years and nine months before collection. This indicates prolonged release inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months. Combined with its archived state, this strongly supports abandonment risk.

Repository archiveddanger

The linked repository is archived and was last pushed in December 2022, so it is no longer an actively maintained source for this release.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, which weakens transparency about the package-to-source relationship. The repository is nevertheless named for the same Magento connector family, so this is caution rather than a severe finding.