tmonier/sylius-container-fill-plugin

Maintainerscaution

Registry publishing is controlled by one individual, which leaves a thin publishing base; the repository is also user-owned rather than organization-backed.

Release historycaution

The package is only about 1 day old with two releases, so its maintenance and compatibility track record are not yet established.

Repo commit activitycaution

The repository reports no commits or active maintainers over the last 3 months, although its recent push and two releases show this is a newly created project rather than clear abandonment.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations unclear for a package intended for checkout and API integrations.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted checkouts, but both action references are unpinned; the lack of a top-level permissions block is acceptable on its own.