fond-of-oryx/company-product-list-search-rest-api

Release historycaution

The latest registry release was over three years ago, with no releases in the last 12 months. The linked repository was pushed more recently, which partly offsets but does not remove the stale release concern.

Repo commit activitycaution

No commits and no active maintainers were recorded during the last three months. This is a meaningful maintenance concern, although the later repository push shows the project has not been abandoned outright.

Repo toolingcaution

The project uses Make and Composer for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkout paths. However, all three action references are unpinned, leaving avoidable build-reproducibility and action-update risk.