fond-of-impala/company-business-unit-quote-connector

Release historycaution

This package has only one release, published nearly two years ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance and makes adoption more dependent on the existing release remaining adequate.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the single-release history, this is a meaningful maintenance concern.

Repo toolingcaution

The project uses Composer and Make, but no security-scanning tools were detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a maintained integration library this weakens vulnerability-reporting transparency, though organization backing and repository tests provide some compensation.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving a modest reproducibility and maintenance-hygiene gap.