yireo/magento2-common-view-models

Release historycaution

Only two releases exist, with the latest published on July 29, 2020 and none in the last 12 months. This is a meaningful concern for registry consumers, although recent repository commits provide some compensating maintenance evidence.

Repo bus factorcaution

All five recent commits came from one contributor, leaving maintenance dependent on a single active person. Organization backing partly offsets this concentration but does not remove it.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency gap rather than evidence of abandonment.

Version stabilitycaution

Version 0.0.2 is not a stable major release, so the public API may still change more readily than in a mature 1.x package.

Workflow auditcaution

All five workflows were analyzed and no untrusted checkouts or script injection were found, but all six action references are unpinned and four high-confidence unpinned-image findings affect CI reproducibility.