mblsolutions/simfoniretail-php-laravel

Release historycaution

The package has nine releases since August 2021 but only one release in the last 12 months. The latest release is recent, so this indicates a quiet cadence rather than clear abandonment.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. The recent release offsets this somewhat, but the current lack of development activity is a maintenance concern.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools are configured. For a Laravel integration package, that leaves a meaningful verification gap.

Security policycaution

The repository has no security policy. This weakens the project's disclosure and response transparency, although it does not by itself indicate unsafe code.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write permissions, but all three referenced actions are unpinned. Unpinned actions create avoidable build reproducibility and update risk.