tmonier/sylius-webhook-outbox-plugin

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer provides little organizational redundancy for support or succession.

Release historycaution

This is the first release, published today, with only one release in the registry. The repository is active enough to support the launch, but there is no demonstrated release track record yet.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Because the project and release are brand new, this is evidence of limited history rather than proof of abandonment, but it reduces confidence in ongoing maintenance.

Security policycaution

No repository security policy was found. For a plugin handling webhook endpoints, secrets, and outbound requests, that is a meaningful transparency gap.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted checkouts, injection findings, or high-severity issues. However, both action references are unpinned, leaving a modest workflow supply-chain hygiene gap.