fond-of-oryx/company-deleter-company-user-archive-connector

Release historycaution

This is the package’s only release, published about 3 years ago, with no releases in the last 12 months. That leaves compatibility and maintenance uncertain despite the stable 1.0.0 version.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The January 2025 push is some compensating evidence, but recent maintenance is still inactive.

Repo toolingcaution

The repository uses Make and Composer, showing basic build support, but it reports no security scanning tools. That is a modest transparency and maintenance weakness.

Security policycaution

The repository has no security policy. For a small connector this is not severe on its own, but it leaves vulnerability reporting and response expectations unclear.

Workflow auditcaution

All 3 analyzed workflow action references are unpinned, weakening build reproducibility. The audit found no untrusted checkout, script injection, or other high-confidence dangerous workflow findings.