fond-of-oryx/company-business-unit-api

Package scaffoldingcaution

The package contains tests, and the repository also has tests, providing useful quality evidence. The missing README is a minor transparency and integration gap for a library package.

Release historycaution

The latest registry release was 3 years 7 months ago, with no releases in the last 12 months. This is a meaningful maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The recent repository push helps, but current development activity remains weak.

Repo toolingcaution

The repository uses Make and Composer for builds, but no security scanning tools were detected. This is a modest transparency gap rather than evidence of unsafe behavior.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence findings or untrusted sinks, but all 3 action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.