tmonier/sylius-quick-order-plugin

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer is consistent with the available ownership context but provides limited redundancy.

Release historycaution

The package is less than one day old with only two releases, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were observed in the last three months, but the repository and package are less than one day old; this limits evidence of ongoing maintenance rather than proving abandonment.

Security policycaution

The repository has no security policy, which is a modest transparency gap for a plugin that processes shop and API input.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned, leaving avoidable build-reproducibility and supply-chain risk.