trunow/shopvam

Release historydanger

The latest of three releases was published about seven years ago, with no releases in the last 12 months. This is strong evidence of abandonment risk despite the package having a stable major version.

Maintainerscaution

One registry maintainer is a thin publishing base for a package with no recent release activity, increasing continuity risk. No organizational backing is shown to compensate for that concentration.

Repo popularitycaution

The repository has zero stars, forks, and watchers. Popularity is not required for a healthy package, but these counters provide no supporting evidence of an active user or contributor community.

Repository archivedcaution

The repository is not archived, which preserves a basic maintenance path, but its last push was about seven years ago and does not offset the long release gap.

Security policycaution

The repository has no security policy. For an application package that may handle product and user data, this reduces transparency and gives consumers no documented reporting path.