fond-of-oryx/jellyfish-sales-order-extension

Release historycaution

Only three releases have been published, with the latest in January 2023 and none in the last 12 months. This indicates a long period without release maintenance, though the stable 2.0.0 line may reduce the need for frequent releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, even though the repository was pushed more recently than the last release.

Repo toolingcaution

The project uses Make and Composer for build tasks, but no security scanning tool was detected. That weakens automated maintenance hygiene without showing a direct dependency risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all three referenced actions are unpinned. That creates avoidable build reproducibility and action-update risk.