yireo/magento2-byattribute-graph-ql

Release historycaution

The package has only 2 releases, with none in the last 12 months; its latest registry release was about six years ago. Recent repository activity partly offsets the age, but the published version may lag current source changes.

Repo bus factorcaution

All 5 recent commits came from one contributor, so maintenance and release knowledge are concentrated. Organization backing provides some handoff capacity but does not remove the single-contributor risk.

Workflow auditcaution

All 6 analyzed action references are unpinned, and high-confidence findings identify floating or unpinned container images in the integration-test and Playwright workflows. The audit was complete and found no untrusted checkouts or script injection, but the image pinning gap weakens build reproducibility.