fond-of-oryx/jellyfish-sales-order-customer-address

Release historycaution

Only two releases exist, with no release in roughly three years and eight months; this materially raises abandonment and maintenance risk despite the package not being deprecated.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Combined with the stale release history, this is a meaningful maintenance concern.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tooling was detected. The missing scanning is a modest hygiene gap, not evidence of abandonment.

Security policycaution

The repository has no security policy, reducing transparency for reporting and handling vulnerabilities, though this alone does not make the package unfit.

Workflow auditcaution

The workflow audit completed fully with no untrusted checkout, injection, or high-severity findings. All three action references are unpinned, which leaves a modest supply-chain hygiene gap.