magematch/magento2-catalog-grid-category-tools

Release historycaution

The package is about 150 days old but has only two releases, both published within roughly one day. That provides limited evidence of an established maintenance cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the past three months. With only two releases, this leaves limited evidence that maintenance is continuing.

Repo toolingcaution

Composer is used for builds, but no security-scanning tooling was detected. For a small extension this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. This reduces transparency for reporting vulnerabilities, although it does not by itself indicate that the package is unsafe to depend on.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, leaving a modest build-reproducibility and supply-chain hygiene gap.