tmonier/sylius-company-accounts-plugin

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational backing to offset the single-person project context.

Release historycaution

Only two releases exist and the package is less than one day old, so there is little evidence of an established release or maintenance history.

Repo commit activitycaution

The repository reports zero commits and zero active maintainers in the last three months; because the package is newly created, this is limited history rather than clear abandonment, but it leaves maintenance capacity unproven.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance unclear for a package with limited operating history.

Workflow auditcaution

The workflow audit completed cleanly with no untrusted checkout, injection, or high-severity findings, but both analyzed action references are unpinned, weakening build reproducibility and supply-chain hygiene.