asdoria/sylius-catalog-mode-plugin

Release historycaution

Only two releases were published, both about three years ago, with none in the last three years. The repository remains available and has a release for this version, which partly offsets the limited release history.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, consistent with roughly two and a half years since its last push. This is a meaningful maintenance and abandonment concern.

Security policycaution

The linked repository has no security policy, reducing transparency about vulnerability reporting and response.

Version stabilitycaution

Version 0.1.1 is not a stable-major release, so compatibility maturity is limited. It is not marked as a prerelease, providing some compensation.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all seven action references are unpinned. The cache-poisoning findings have low confidence and therefore remain hygiene concerns rather than severe evidence.