bitbag/vue-storefront2-plugin

Release historydanger

The package has had no release in about three years, despite a previously regular median interval of about 24 days. That long gap is a substantial abandonment concern.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the prolonged release gap and indicating no current maintenance activity.

Repo issue activitycaution

No issues or pull requests were opened, closed, or merged in the last month, while five issues and four pull requests remain open. This supports the picture of an inactive project.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, although it is less serious than the maintenance inactivity.

Workflow auditcaution

All 8 analyzed action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings are low-confidence hygiene observations, so they do not independently raise this to severe risk.