faslet/magento2-hyva

Release historydanger

The package has had only one release, published 828 days ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which raises abandonment risk despite a more recent recorded push elsewhere in the repository data.

Repo popularitycaution

The repository has zero stars and one fork, offering little supporting evidence of broad community review. Low popularity is not by itself evidence that a small package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and disclosure expectations undocumented.

Workflow auditcaution

The workflow audit completed successfully with no detected injection or high-severity findings, but its single action use is unpinned and the workflow has no top-level permissions block. These are modest supply-chain hygiene gaps, not severe risks on their own.