arobases/sylius-back-in-stock-notification-plugin

Release historycaution

The package has only two releases, with the latest published in January 2023 and none in the following three years. This is strong evidence of abandonment risk, although the repository is not archived.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the old latest release, this materially increases the risk that compatibility issues will remain unresolved.

Repo issue activitycaution

There were no new or merged pull requests and no issue activity in the last month. This is consistent with the broader signs of inactivity, although the open-issue count is unknown.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, though it is a secondary concern compared with the maintenance evidence.

Workflow auditcaution

All 10 analyzed action references are unpinned, and a high-confidence audit finding identifies an archived action; both weaken workflow supply-chain hygiene. The cache-poisoning findings are low confidence and do not materially change the assessment.