aligent/magento2-default-async-events

Release historycaution

The package has had no registry release in nearly four years, with zero releases in the last 12 months. Its three-release history shows an established but now inactive release line.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long period since the latest release and indicating abandonment risk.

Security policycaution

The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package used in Magento integrations.

Workflow auditcaution

All four analyzed action references are unpinned, and the audit found a high-confidence medium-severity use of an archived action. No untrusted checkout or script-injection paths were found, which limits the risk.