webgriffe/sylius-pagolight-plugin

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Although a release was published during the broader period, this indicates a meaningful recent maintenance gap.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether the linked repository directly represents this release.

Security policycaution

The repository has no SECURITY policy, which leaves vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All seven analyzed workflow action references are unpinned, reducing build reproducibility. The reported cache-poisoning findings have low confidence and therefore add no material risk on their own; the workflow audit itself was complete.