vkolya/opencart-sdk

Release historydanger

This is the package's only release, published in February 2018, with no releases in the last 12 months. The long absence of updates materially raises abandonment and compatibility risk.

Repo popularitycaution

The repository has only 3 stars and 2 forks. Popularity is supporting evidence rather than a verdict, but these low figures provide little evidence of broad community review or support.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are present. That weakens supply-chain and vulnerability hygiene, although it is not severe enough to make the release unfit on its own.

Repository archivedcaution

The repository is not archived, which avoids a severe abandonment signal, but its last push was in February 2018 and provides no evidence of recent maintenance.

Security policycaution

The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap for a library handling API credentials and sessions.