setono/sylius-plugin-pack

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap rather than evidence the package is unsafe.

Security policycaution

The repository has no security policy, leaving reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 3 action references are unpinned, making workflow dependencies less reproducible.