fond-of-oryx/jellyfish-sales-order-b2c

Release historycaution

Only two releases exist, with the latest published in January 2023 and none in the last 12 months. That long release gap raises maintenance and abandonment concerns.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Combined with the stale registry release history, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Make and Composer, providing build tooling, but no security-scanning tool was detected. This is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no security policy. For a small module this is a documentation gap, but it weakens the project's disclosure and response transparency.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three referenced actions are unpinned, leaving the workflow exposed to upstream action changes.