sammyjo20/saloon-cache-plugin

Registry deprecationdanger

Packagist marks the entire package as abandoned and names saloonphp/cache-plugin as its replacement. This is a severe adoption risk even though the assessed release is recent.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Although a recent release was published, the lack of recent commit activity weakens maintenance confidence.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package. Because this package is associated with an organization-owned repository, the mismatch may reflect a plugin or monorepo arrangement, but ownership of this exact package is less transparent.

Workflow auditcaution

Both workflows were analyzed with no audit findings or unsafe-trigger sinks. However, all 5 action references are unpinned and one workflow grants top-level write permissions, creating a modest reproducibility and permission-hygiene concern.