fond-of-oryx/customer-product-list-connector

Release historycaution

The package has had no release in about 3 years and 8 months, with zero releases in the last 12 months. This is a meaningful maintenance concern despite four total releases and a regular earlier cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. This raises a maintenance concern, although the repository's January 2025 push and organization backing provide some compensating evidence.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a hygiene gap, not evidence that the package is unsafe by itself.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, creating a modest reproducibility and workflow-supply-chain weakness.