fifty-deg/sylius-robots-plugin

Release historycaution

The package has only two releases, with the latest on August 9, 2023 and none in the last 12 months. This is a substantial maintenance concern for a dependency now more than three years old.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. The repository is not archived, but there is no observed recent maintenance.

Repo package mentioncaution

The linked repository name does not match the package name and its README does not mention the package, so the package-to-repository relationship is less transparent despite the repository otherwise containing relevant plugin source files.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities, although the package's small scope and available source provide some compensating visibility.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. One analyzed action reference is unpinned, which is a minor supply-chain hygiene gap.