webbytroopstechnologies/magento2-module-core

Package scaffoldingcaution

A README is present, which helps consumers, and missing tests or a changelog is normal for a published package artifact. However, the README contains a Composer command for an unrelated Laravel package, making installation guidance unreliable.

Release historycaution

The package has only three releases, with no releases in the last 12 months and the latest published in July 2023. This indicates weak release momentum, although the repository was pushed more recently.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, which reduces evidence of ongoing maintenance. The later repository push shown by repository_archived provides some counterevidence but does not establish regular activity.

Repo toolingcaution

Composer is used as the build tool, which fits this package, but no security scanning tools are configured. That is a maintenance and transparency gap rather than evidence of malicious behavior.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This is a modest transparency gap for a Magento extension.