fond-of-oryx/return-labels-rest-api-company-business-unit-connector

Release historycaution

Only two releases exist, and the latest was published in January 2023, about 3 years and 8 months before collection, with no releases in the last 12 months. This is a meaningful maintenance concern.

Repo commit activitycaution

There were no commits or active maintainers in the three months before collection. The January 2025 push partly offsets this, but current maintenance capacity remains uncertain.

Repo toolingcaution

Make and Composer provide build tooling, but no security scanning tools were detected. This is a modest process gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, though this alone does not make the package unfit.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, and it does not grant top-level write permissions. However, all three action references are unpinned, leaving avoidable workflow supply-chain exposure.