odiseoteam/sylius-brevo-plugin

Release historycaution

The package is only 3 days old and has just 2 releases, so there is not yet enough release history to demonstrate long-term maintenance stability.

Repo bus factorcaution

One contributor made 100% of the 28 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown to share current maintenance responsibility.

Repo commit activitycaution

The repository recorded 28 commits in the last 3 months, which is strong activity for a new project. However, all activity came from one active maintainer, leaving continuity dependent on that person.

Security policycaution

The repository has no security policy. That is a transparency gap for a plugin handling customer, order, and marketing integrations, although it is not evidence of unsafe code by itself.

Workflow auditcaution

All 5 analyzed action references are unpinned, reducing build reproducibility and increasing exposure to changes in action code. The single workflow was fully analyzed, has no untrusted checkout or script-injection findings, and lacks top-level permissions without using top-level write access.