fond-of-oryx/jellyfish-sales-order-cart-note

Package scaffoldingcaution

The package contains tests, and the repository also has tests; the missing changelog is normal packaging practice. The missing README is a minor consumer-documentation gap for a library package.

Release historycaution

The package has had only two releases, with none in the last 12 months; its latest release was in January 2023. This is a meaningful maintenance concern for a dependency, though the repository was pushed more recently.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, indicating no recent development activity. The repository's January 2025 push provides some offset but does not show ongoing maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no detected injection or high-confidence audit findings, but all three action references are unpinned. The workflow has no top-level permissions block, which is acceptable on its own, while unpinned actions remain a supply-chain hygiene gap.