fond-of-oryx/company-product-list-connector-extension

Release historycaution

Only two releases were published, with the latest on January 20, 2023 and none in the past 12 months. This indicates a long release gap for a dependency that may still require compatibility maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured. Combined with the absence of releases in the past 12 months, this raises concern about current maintenance capacity.

Repo toolingcaution

The repository uses Make and Composer for build tasks, but no security scanning tools were detected. This is a modest hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three analyzed workflow actions are unpinned, so workflow inputs can change without a repository commit. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-confidence findings, which limits the severity.