monsieurbiz/sylius-advanced-shipping-plugin

Release historycaution

This is the only release, published about 20 months ago, with no releases in the last 12 months. That leaves meaningful uncertainty about ongoing maintenance despite the stable version.

Repo commit activitycaution

The repository recorded no commits and had no active maintainers during the last 3 months. Although the repository was pushed more recently than the release, current development activity is limited.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and response. This is a modest concern because security scanning tooling is present.

Workflow auditcaution

All 11 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain hygiene. The audit found no untrusted checkout, script injection, dangerous trigger, or high-severity finding, so this is caution rather than danger.