setono/sylius-variant-link-plugin

Release historycaution

The package has 11 releases since September 2019, but none in the last 12 months and the latest was published in August 2023. This is a substantial maintenance slowdown for a dependency.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with the package's broader inactivity and increasing abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap rather than evidence that the release is unsafe.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings. However, all 19 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.