setono/sylius-quickpay-refund-bridge-plugin

Release historydanger

The latest release was published in April 2022, with no releases in over four years and only three releases overall. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and providing no evidence of current maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and handling expectations unclear. This is a transparency gap, though it is less severe than the maintenance evidence.

Workflow auditcaution

The single workflow was fully analyzed without untrusted checkouts, script injection, or audit findings. However, all 19 action references are unpinned, leaving avoidable build-reproducibility and action-substitution risk.