fond-of-oryx/splittable-checkout-company-user-connector

Release historycaution

Only two releases exist, with none in the last 12 months; the latest release was in January 2023, about 3 years and 8 months before collection. This indicates a meaningful maintenance concern, though the stable major version and recent repository push provide some context.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. This is evidence of slowed maintenance, although the repository was pushed in January 2025.

Repo toolingcaution

The project uses Composer and Make, which supports repeatable builds, but no security-scanning tools were detected. That is a modest transparency and hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, reducing build reproducibility and supply-chain control.