wmd/craft-omnibus

Release historycaution

The package is 0 days old with four releases published within roughly three hours, so there is not yet enough history to establish a dependable release pattern.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers in the last three months; because the package itself is newly published, this is limited evidence but still leaves ongoing maintenance unproven.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package intended for Craft Commerce sites.

Workflow auditcaution

The only workflow is fully analyzed and has no dangerous triggers, untrusted checkouts, or audit findings; however, its one action use is unpinned, so that reference lacks reproducibility and supply-chain pinning.