synolia/sylius-scheduler-command-plugin

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, indicating a current maintenance pause. The recent v4.0.2 release and longer release history partly offset this, making it a caution rather than an abandonment verdict.

Repo issue activitycaution

No issues or pull requests were opened or closed in the last month, with six open issues and one open pull request; this suggests limited current responsiveness but not severe neglect by itself.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools were detected. The build tooling is a positive signal, while the missing security automation leaves a modest transparency gap.

Security policycaution

No repository security policy was found, leaving unclear guidance for reporting vulnerabilities. This is a transparency gap, although it does not by itself indicate that the package is unsafe to use.

Token permissionscaution

Neither of the two workflows declares top-level token permissions, so their GitHub Actions access is less explicit than preferred. No workflow requests top-level write access, which limits the severity of the gap.