sierratecnologia/integrations

Release historydanger

The latest registry release was July 2021, with no releases in the last 12 months. That is more than five years without a published update and is a significant abandonment concern.

Dependency profilecaution

The package declares 20 runtime dependencies spanning cloud, social, storage, and API integrations. This broad dependency surface increases maintenance and compatibility exposure for an already stale release.

Lifecycle scriptscaution

The package runs post-create, post-install, and post-update Composer scripts. These are operationally relevant install-time behaviors and add dependency-installation risk beyond ordinary library loading.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although it is not archived, there is no recent development evidence to offset the stale registry release.

Workflow auditcaution

All 14 analyzed action references are unpinned, and the audit found a high-confidence, high-severity unpinned container image in php-cs-fixer.yml. This weakens build reproducibility and supply-chain hygiene.