elcodi/state-transition-machine-bundle

Release historydanger

The package has 72 releases, but its latest release was over 10 years ago and it has had no releases in the last 12 months. The earlier release cadence shows past activity but does not offset the prolonged inactivity.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, consistent with the last push being over 10 years ago. This is strong evidence of abandonment risk for a dependency.

Package scaffoldingcaution

The release includes a README, which supports consumer understanding; missing tests and a changelog in the published artifact are normal packaging practice for this ecosystem. The source also lacks repository tests and a changelog, limiting project transparency somewhat.

Repo package mentioncaution

The repository name does not match the full package name and its README does not mention the package. While a name difference can be normal for a bundle, the absence of any README reference makes package ownership less clear.

Repo toolingcaution

The repository uses Composer for builds, showing basic project tooling, but it reports no security scanning tools. This is a modest transparency gap rather than a standalone reason to reject the package.