fond-of-oryx/credit-memo-gift-card-connector

Release historycaution

The latest release was published more than three years ago, and there have been no releases in the last 12 months. Only three releases exist, which is meaningful evidence of slowing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it was pushed in January 2025, the current inactivity adds abandonment concern alongside the stale release history.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

No repository security policy was found. This weakens vulnerability-reporting transparency, although it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, and it avoids top-level write permissions. All three analyzed actions are unpinned, creating a supply-chain hygiene gap.