supplycart/xero

Release historycaution

The package has 34 releases since December 2020, but none in the last 12 months and the latest release was in June 2024. This indicates a substantial maintenance pause for an integration library.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, consistent with the release pause and raising the risk of unaddressed compatibility issues.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a modest transparency and maintenance weakness, not evidence of an unsafe package by itself.

Security policycaution

The repository has no security policy. For a package handling Xero authentication and tokens, this removes a useful channel for reporting and understanding security maintenance.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, its only action reference is unpinned, leaving avoidable dependency drift and tampering exposure.