fond-of-oryx/product-locale-restriction-search

Release historycaution

The package has had no release in more than three years: its latest release was June 6, 2023, with zero releases in the last 12 months. This materially raises staleness risk despite the linked repository being pushed more recently.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The January 2025 push shows the repository is not abandoned outright, but current maintenance remains quiet.

Repo toolingcaution

The repository uses Make and Composer, but no security scanning tools were detected. That is a moderate transparency and maintenance gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All three analyzed workflow action references are unpinned, which weakens build reproducibility and update control. The audit was complete and found no dangerous triggers, untrusted checkouts, script injection, or high-confidence workflow findings.