skom/stylex-connector

Release historycaution

This is the first release, published 0 days ago, so there is no release track record yet. That is expected for a new package but leaves maintenance maturity unproven.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the past three months. Because the package was released today, this is mainly an unproven maintenance signal rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That weakens automated supply-chain hygiene for a package intended for production TYPO3 projects.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and disclosure expectations undocumented.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no high-confidence workflow findings or untrusted-code sinks. However, all 4 referenced actions are unpinned, which creates avoidable reproducibility and action-substitution risk.