warleyelias/ecommerce-module-core

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the release history showing no releases for about 14 months. This materially raises maintenance and abandonment risk.

Lifecycle scriptscaution

The package runs post-install and post-update Composer scripts, adding install-time behavior that users must account for. This is a supply-chain hygiene concern but not severe by itself.

Project backingcaution

The repository is owned by an individual account rather than an organization, so the single registry maintainer does not show broader project backing. This reinforces the thin maintenance picture but is not severe alone.

Release historycaution

The package has only two releases, both effectively published on the same day, and no releases in the last 12 months. This indicates limited release maturity and no recent maintenance evidence.

Repo toolingcaution

Composer build tooling is present, supporting a recognizable build process, but no security scanning tools were detected. The missing scanning is a modest transparency gap rather than evidence of unsafe code.