thelia/sub-order-generator-module

Release historydanger

The package has had no release in over two years, despite 16 releases during its first five months. That long silence materially raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no recent maintenance capacity.

Repo toolingcaution

The project uses Composer, but no security-scanning tools were detected. The absence of scanning weakens automated safeguards, while the build tooling itself is appropriate for this package.

Security policycaution

The linked repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This is a transparency gap, though not evidence of a vulnerability by itself.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Its one action reference is unpinned, which is a modest build-reproducibility and supply-chain hygiene concern.