muffin/orderly

Release historycaution

The package has existed since 2016 with eight releases, but it has had no release in the last 12 months and the latest release was in October 2024. This lowers confidence in ongoing maintenance without indicating abandonment by itself.

Repo commit activitycaution

There were no commits or active maintainers in the last three months. The January 2026 push shows the repository is not archived, but current development activity remains limited.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The workflow audit completed successfully and found read-only permissions with no dangerous triggers or audit findings. However, both analyzed action references are unpinned, leaving a mild reproducibility and workflow-integrity gap.