baraja-core/shop-product-loader

Release historydanger

The latest release was over four years ago, with no releases in the last 12 months and only three releases overall. This is strong evidence of abandonment risk, although the package is not registry-deprecated.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. No provided activity signal compensates for this lack of recent maintenance.

Package scaffoldingcaution

The artifact includes a README and a GitHub release with notes for this version, but the README is only 47 characters and says it is a template. Missing tests and a changelog are normal packaging practice and do not lower the score.

Workflow auditcaution

Both workflows were fully analyzed with no dangerous triggers or audit findings, but all 7 action references are unpinned. That leaves the build exposed to changes in referenced actions and is a concrete hygiene concern.