zero1/module-gift-message-for-virtual-orders

Release historycaution

The package has four releases but no release in the last 12 months, and its latest release was about four years ago. That materially increases abandonment and compatibility risk.

Repo commit activitycaution

There were no commits or active maintainers in the last three months, consistent with the multi-year release gap and indicating little current maintenance capacity.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the linkage is less transparent and warrants caution despite the related-looking repository URL.

Repo toolingcaution

Composer is used for project builds, but no security scanning tooling is present. For a small module this is a meaningful oversight gap, though not evidence of unsafe code by itself.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response.