fond-of-oryx/jellyfish-sales-order-company-user

Package scaffoldingcaution

The package includes tests, but neither the artifact nor the repository has a README or changelog. The missing README reduces consumer guidance for this library package, while missing tests in the artifact is normal packaging practice because repository tests are present.

Release historycaution

The package has had no release in about 2 years and 8 months, with zero releases in the last 12 months. This is a meaningful maintenance concern, although the package is mature rather than experimental.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. Combined with the long release gap, this points to slow or stalled maintenance.

Repo toolingcaution

The project uses Make and Composer, but no security scanning tools were detected. This is a transparency and maintenance-process gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a modest transparency concern for a dependency.