tmonier/sylius-gpsr-plugin

Release historycaution

This is the package's first release, published 0 days ago, with only 1 release recorded. The complete absence of release history limits evidence of sustained maintenance, though it is expected for a new package.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Because the repository and release are 0 days old, this is mainly a lack of maintenance history rather than evidence of a collapsed project.

Security policycaution

No security policy was found in the repository. This is a transparency gap for a package that integrates into an application's admin and storefront, although it is not evidence of a security defect.

Workflow auditcaution

The single workflow was fully analyzed with no injection, untrusted-checkout, or audit findings, and no top-level write permissions. However, both action references are unpinned (2 of 2), weakening build reproducibility.