techdivision/import-product-variant-ee

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of active maintenance despite the recent registry release.

Repo toolingcaution

Composer and Robo build tooling are present, but no security-scanning tooling was detected. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

The repository has no published security policy. This reduces transparency for reporting and handling security issues, though it does not by itself show abandonment.

Workflow auditcaution

The single workflow was fully analyzed with no detected injection or high-severity findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions leave a supply-chain hygiene gap.