tmonier/sylius-quote-request-plugin

Maintainerscaution

One individual has registry publish access. That is a limited publishing base, although the linked repository is also owned by that individual, so the registry list does not by itself indicate missing organizational backing.

Release historycaution

This is the package's first release, published today, with only one release recorded. That is expected for a new project but leaves no track record for judging sustained maintenance.

Repo commit activitycaution

The repository has zero commits and zero active maintainers recorded over the last three months. Because the release is only hours old, this mainly means there is no established activity history yet rather than proven abandonment.

Security policycaution

No repository security policy was found. This is a modest transparency gap for a plugin handling customer and quote data, though security scanning tools provide some compensation.

Workflow auditcaution

The sole workflow was fully analyzed with no injection, untrusted checkout, or high-confidence audit findings. Both action references are unpinned, which is a supply-chain hygiene weakness, while the absence of a top-level permissions block is acceptable on its own.