tmonier/sylius-order-hold-plugin

Release historycaution

This is the first release and the package is 0 days old, so there is no release cadence or track record yet. The same-day repository push and release notes provide useful initial transparency but cannot establish ongoing maintenance.

Repo commit activitycaution

The repository has 0 commits and 0 active maintainers in the last 3 months, which provides no evidence of sustained activity. Because the package was released today and was pushed immediately beforehand, this is limited evidence rather than abandonment.

Security policycaution

The repository has no published security policy, which reduces transparency about vulnerability reporting and response. The repository does use several security scanning tools, partly compensating for that documentation gap.

Workflow auditcaution

The audit analyzed all 1 workflow with no dangerous triggers or findings, but both of its 2 action references are unpinned. That leaves avoidable build reproducibility and action-integrity risk, though the clean audit and lack of broad write permissions reduce the concern.