tomatophp/tomato-ecommerce-module

Maintainerscaution

Only one registry account can publish releases, which is a thin publishing base. The organization-owned repository provides some backing, so this is a limited concern rather than a severe risk.

Release historycaution

This is the package's only release, published about two and a half years ago, with no releases in the last 12 months. That leaves its maintenance and compatibility outlook uncertain.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last three months, consistent with a project that is currently inactive.

Repo popularitycaution

The repository has 2 stars, 0 forks, and 1 watcher. Low adoption is only supporting evidence, but it provides little additional confidence in long-term maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a hygiene gap, not evidence that the release is unsafe by itself.