sylius/test-application

Repo bus factorcaution

One contributor made all commits in the last 3 months, creating a concentrated maintenance risk. Organization backing provides some ability to hand maintenance off, but no second active contributor is shown.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so direct development activity is limited despite recent release and pull-request activity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the missing scanning is a hygiene gap rather than evidence of abandonment.

Version stabilitycaution

The assessed version is a prerelease and all recent releases are prereleases, so consumers should expect an evolving API and less stability than a stable release line.

Workflow auditcaution

The sole workflow was fully analyzed with no reported findings or untrusted checkout paths, but it grants top-level write permissions and both action references are unpinned. These are meaningful workflow hygiene and reproducibility concerns, though not severe on their own.