akawakaweb/customer-reorder-plugin

Package scaffoldingdanger

The package includes a substantial README, tests, and release notes, but the README explicitly says the repository is deprecated, will not be maintained, and will receive no bug fixes. The tests and release notes provide some compensation but do not remove the abandonment risk.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the release history shows recent releases, the current source activity provides weak evidence of ongoing maintenance.

Security policycaution

The linked repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is secondary to the explicit maintenance warning.

Workflow auditcaution

All 7 analyzed action references are unpinned, which weakens build reproducibility. The cache-poisoning findings are low-confidence hygiene warnings and do not independently establish a severe risk.