setono/sylius-tier-pricing-plugin

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. The recent release partly offsets this, but the lack of follow-up activity raises maintenance risk for an alpha release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces supply-chain hygiene without showing abandonment by itself.

Security policycaution

The repository has no security policy. That weakens vulnerability-reporting transparency, although it is not evidence that the package is unsafe.

Version stabilitycaution

This is a prerelease, and five of the six recent releases are prereleases, so API and integration changes remain more likely than for a stable release. The stable major line provides some context but does not remove the alpha-stage risk.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 8 action references are unpinned. Unpinned actions weaken build reproducibility and update control.