fond-of-oryx/splittable-checkout-rest-api-cart-note-connector

Release historycaution

The package has only two releases, with none in the last 12 months and the latest published about three years ago. This indicates slow or possibly stalled maintenance for a dependency.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. Combined with the long release gap, this raises the risk that issues and updates will not receive timely attention.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. That is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy. This leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly with no detected dangerous triggers, untrusted checkouts, injections, or audit findings. However, all three action references are unpinned, so their behavior can change outside a reviewed release.