bitbag/sylius-adyen-plugin

Release historycaution

The package has 16 releases since March 2022, but none in the last two years; the long pause materially raises abandonment risk despite a historically regular cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months, consistent with the registry's prolonged release gap and reducing confidence in ongoing maintenance.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, so the link may not clearly establish package ownership even though the organization backing is known.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations unclear for a payment integration; this is a transparency gap, not evidence of malicious behavior.

Workflow auditcaution

Both workflows were analyzed without untrusted checkouts or script injection, but all 12 action references are unpinned. The four cache-poisoning findings are low-confidence hygiene signals and do not independently establish a severe risk.