verdient/shopify

Licensecaution

Neither the registry metadata, package artifact, nor linked repository provides a recognized license or license file. That creates a genuine adoption and transparency concern for an open-source dependency.

Package scaffoldingcaution

The published package has no README, tests, or changelog, and the linked repository also reports none. The missing consumer documentation is a usability gap for this library, while absent tests and changelog are weaker evidence on their own.

Release historycaution

The package has 40 releases since October 2022, but none in the last 12 months; the latest release was over a year ago. This is meaningful evidence of slowing maintenance, though the earlier release history shows prior activity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This raises maintenance and abandonment risk, but does not by itself show that the package is unfit.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools are reported. This is a modest process gap that adds to the other transparency concerns rather than determining the verdict alone.