guiziweb/sylius-grid-assistant-plugin

Repo bus factorcaution

All 11 recent commits came from one contributor, leaving maintenance dependent on a single active developer; organization backing partly reduces but does not remove this concern.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.

Version stabilitycaution

Version 0.3.0 is not a stable major release, so consumers should expect possible compatibility changes despite the absence of prerelease versions.

Workflow auditcaution

The audit found high-confidence medium-severity secrets-inherit findings in two reusable workflows, and all five analyzed action references are unpinned. No untrusted checkout, script injection, top-level write permissions, or incomplete audit was reported.