setono/sylius-coupon-url-application-plugin

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last 3 months. For an alpha release, that is a meaningful warning about maintenance responsiveness.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance-hygiene gap, not evidence of unsafe code.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a package used in commerce applications.

Version stabilitycaution

This is a prerelease alpha, and the release notes explicitly say it is not recommended for production until a stable tag. That materially increases adoption risk for production consumers.

Workflow auditcaution

The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, all 7 action references are unpinned, and the workflow lacks a top-level permissions block, creating a build-reproducibility and hygiene concern.