webkul/code-generator

Licensecaution

The artifact includes an MIT license file, but the manifest declares the package as proprietary. That mismatch creates avoidable licensing uncertainty for adopters.

Release historycaution

The package has had no releases in more than two years, despite ten releases overall; this is meaningful evidence of reduced maintenance for a Magento development tool.

Repo commit activitycaution

There were no commits or active maintainers in the measured three-month window, reinforcing the concern that maintenance has slowed substantially.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are configured. This weakens repository transparency and automated assurance without proving the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but its only action use is unpinned. The missing top-level permissions block is acceptable on its own.