fond-of-impala/erp-order-cancellation-extension

Release historycaution

The package has only two releases, with the latest nearly 2 years ago and no releases in the last 12 months. This indicates materially limited ongoing maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, reinforcing the concern raised by the stale release history.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. That leaves an avoidable gap in ongoing maintenance hygiene.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous findings, but all three action references are unpinned. This is a supply-chain hygiene weakness, not a severe risk by itself.