tmonier/sylius-bulk-actions-plugin

Release historycaution

This is the package's first release, published 0 days ago, so there is no release history or cadence to demonstrate sustained maintenance. The stable v1.0.0 release and detailed release notes provide some maturity evidence, but cannot replace history.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months. Because the repository and release are both brand new, this is partly explained by recency, but it still leaves maintenance capacity unproven.

Security policycaution

No repository security policy was found, leaving disclosure guidance and maintainer response expectations undocumented. This is a transparency gap, not evidence of unsafe code.

Workflow auditcaution

The sole workflow was fully analyzed with no high- or medium-confidence findings, no untrusted checkout or script-injection paths, and no top-level write permissions. Both of its two action references are unpinned, which is a modest reproducibility and supply-chain hygiene concern.