davyin/lightning_workflow

Dependency profilecaution

The release declares six runtime dependencies, including core Drupal-related modules and Composer tooling. This is a substantial dependency surface, but it is coherent with the package's Drupal workflow functionality.

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These can alter a consumer's installation, so they add a small supply-chain review concern, although this pattern is common for Composer packages.

Release historycaution

The latest release was over five years ago, with no releases in the last 12 months. That is a meaningful maintenance concern for a Drupal module, despite nine total releases showing some earlier development.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last three months. This supports the long release gap as evidence of uncertain ongoing maintenance.

Repo toolingcaution

The repository uses Composer for builds, but no security scanning tools were detected. That is a modest transparency and maintenance gap.