fond-of-oryx/availability-cart-data-extender

Release historydanger

The package has only 3 releases since September 2021, with no release in over 3 years and none in the last 12 months. This is a substantial maintenance concern for a dependency.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. The recent repository push provides some counterevidence, but the current activity still indicates limited ongoing maintenance.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That weakens disclosure transparency, although it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted execution paths, but all 3 of its action references are unpinned. This leaves avoidable build-supply-chain reproducibility risk.