fond-of-oryx/jellyfish-sales-order-company-business-unit

Release historycaution

The latest release was over two years ago, with no releases in the last 12 months and only three releases overall. This is meaningful evidence of slowing maintenance, though the repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the stale release history, this raises the risk that fixes may arrive slowly.

Repo toolingcaution

The repository uses Make and Composer, showing basic build support, but no security scanning tools were detected. That is a maintenance and assurance gap rather than a severe dependency risk.

Security policycaution

No security policy was found in the repository. This weakens transparency around vulnerability reporting, although it is not by itself evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but all three action references are unpinned. That leaves avoidable workflow supply-chain exposure.