techdivision/import-product-grouped

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The recent release history partly offsets this, but the lack of recent development activity remains a maintenance concern.

Repo popularitycaution

The repository has two forks and no stars, indicating limited community adoption. Popularity is supporting evidence only, so this modestly lowers confidence rather than determining the verdict.

Repo toolingcaution

Composer and Robo provide build tooling, but no security-scanning tools are reported, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no SECURITY.md or other security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility.