fond-of-oryx/splittable-checkout-rest-api

Release historycaution

The package has six releases, but none in the last 12 months and its latest release was over three years ago. This creates a meaningful maintenance concern despite its established release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the old latest registry release, this is evidence of reduced current maintenance.

Repo toolingcaution

The repository uses Make and Composer, but no security-scanning tool was detected. This is a hygiene gap, not evidence that the package is unsafe by itself.

Security policycaution

The repository has no security policy. That weakens the project's documented process for handling vulnerabilities, although it does not by itself show abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no injection or high-severity findings, but all three action references are unpinned. The absence of a top-level permissions block is acceptable on its own; unpinned actions remain a modest reproducibility and update risk.