dimita/laravel-business-orchestration-engine

Release historycaution

This is a young package with one release about 9 months ago and no subsequent releases. That is not abandonment by itself, but it leaves little evidence of sustained maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the three months before collection. For a package with only one release, this leaves ongoing maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a transparency and upkeep gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities. This modestly reduces project transparency for a library handling business workflows.

Workflow auditcaution

The sole workflow was fully analyzed with no reported audit findings and no dangerous triggers or sinks. However, one of two action references is unpinned, leaving a small build-reproducibility gap.