fond-of-impala/customer-product-lists-bulk-rest-api

Release historycaution

This is the only release, published about 2 years and 7 months ago, with no releases in the last 12 months. That limits evidence of an ongoing maintenance cycle.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. This is concrete evidence of currently inactive maintenance and increases abandonment risk.

Repo toolingcaution

The repository uses Make and Composer build tooling, which supports repeatable project work. No security scanning tools were detected, a minor hygiene gap for a maintained package.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 of 3 action references are unpinned, leaving avoidable build reproducibility and action-update risk.