lionelkouame/sylius-import-export-plugin

Release historydanger

The latest release was published in March 2022, with no releases in the last 12 months and 16 releases concentrated at the project's start. This long publishing gap is strong evidence of abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap. No provided maintenance signal compensates for this inactivity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency and maintenance gap, although it is less severe than the inactivity evidence.

Workflow auditcaution

All seven workflow action references are unpinned, weakening build reproducibility. The audit's cache-poisoning findings have low confidence and concern release-cache hygiene only, so they do not independently indicate severe risk.