yireo/magento2-salesblock2-by-email

Release historycaution

Only four releases have been published since July 2020, with no registry release in the last 12 months and the latest release in April 2024. Recent repository commits partly offset the quiet registry cadence, but release availability remains a maintenance concern.

Repo bus factorcaution

All five recent commits came from one contributor, which concentrates practical maintenance capacity. Organization ownership provides some ability to hand off maintenance, so this is not a severe risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The repository's security policy and tested CI provide some compensating transparency.

Workflow auditcaution

All five workflows were analyzed without untrusted checkouts or script injection, but all six action references are unpinned and high-confidence findings identify floating or unpinned container images in integration and Playwright workflows. These are meaningful reproducibility and build-integrity weaknesses, though no broad write permissions were found.