phpro/mage2-module-sales-state-events

Release historydanger

The package has only 3 releases and none in the last 12 months; the latest release was more than four years ago. This materially raises abandonment and compatibility risk despite the package's age.

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing that maintenance has stopped rather than merely slowed.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, with one issue and one pull request still open. This supports the broader evidence of limited current maintenance.

Security policycaution

The linked repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it does not by itself indicate an unsafe release.

Workflow auditcaution

The single workflow was fully analyzed with no high- or medium-severity findings, no untrusted checkout, and no script injection. However, all 5 action references are unpinned, leaving avoidable build reproducibility and action-substitution risk.