sozodesign/magento2-module-sozo-feedbucket

Release historydanger

This is the package's only release, published nearly three years ago, with no releases in the last 12 months. That leaves substantial abandonment risk despite the stable version label.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the long gap since its only release. The inactive development record materially reduces confidence in ongoing maintenance.

Workflow auditcaution

All six action references are unpinned, and the audit found a high-confidence unpinned container image. The workflow has no untrusted checkout or script-injection path, which limits the risk but does not remove this build-integrity gap.