whilesmart/eloquent-products

Release historycaution

This package has only one release, published 99 days ago, so there is not yet enough history to establish a dependable maintenance cadence.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. Because the package is only 99 days old, this is an early maintenance warning rather than proof of abandonment.

Repo toolingcaution

The repository uses Make and Composer build tooling, but no security scanning tools are reported, leaving a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. This does not show a defect in the package, but it gives maintainers and consumers no documented vulnerability-reporting path.

Workflow auditcaution

All four workflows were analyzed, with no untrusted checkout or script-injection findings, but all six action references are unpinned and a high-confidence audit found an ad hoc package installation. Two release workflows also grant top-level write permissions, adding avoidable workflow risk.