magento/magento-zf-soap

Release historycaution

Only one release has been published, with no established release cadence over the package's 241-day history. This limits evidence of ongoing maintenance and version support.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is concerning for a newly released compatibility fork with no demonstrated maintenance continuity.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed without detected audit findings or untrusted execution sinks, but all nine action references are unpinned and one workflow grants top-level write permissions. The unpinned references are a supply-chain hygiene gap, while the write permission is only a mild concern without an untrusted trigger.