fivelab/transactional

Release historycaution

The package has 10 releases over more than 11 years, but none in the 20 months since January 2025. That extended gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the three months measured, consistent with the long registry release gap and indicating reduced recent maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed and had no high-confidence audit findings or dangerous untrusted triggers. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.