timothydc/laravel-lightspeed-ecom-product-feeds

Release historycaution

The package has 32 releases since June 2020, but none in the last 12 months and its latest release was in October 2024. That long pause raises maintenance and abandonment concerns despite the established release history.

Repo commit activitycaution

The repository had no commits and no active maintainers in the last 3 months, consistent with the extended release pause. This weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces assurance for future dependency and code changes.

Security policycaution

No security policy was found in the repository, leaving vulnerability reporting and response practices undocumented. This is a transparency gap, though it is not evidence of a security incident.

Workflow auditcaution

Both workflows were analyzed successfully and have no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image and all five action references are unpinned. These are workflow hygiene risks rather than evidence of a compromised release.