vgrish/lost-orders-ms2

Release historydanger

The package has had only 4 releases, with none in the last 12 months; its latest release was on November 11, 2024, roughly 22 months ago. This is a substantial maintenance concern despite the package not being deprecated.

Lifecycle scriptscaution

The package runs a post-install command, so installation performs additional actions beyond extracting dependencies. This is an operational and review concern for a package that also installs application functionality.

Project backingcaution

The package and repository are owned by the same individual account, providing direct ownership alignment but no organization-level backing. This leaves a relatively thin support structure.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap. That weakens evidence of ongoing maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. That is a modest transparency gap rather than evidence of unsafe code.