php-architecture-kit/state-machine

Dependency profilecaution

Eight runtime dependencies create a meaningful dependency surface for a state-machine library, but the profile is coherent and does not by itself indicate poor health.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest quality and transparency gap.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

No GitHub Actions workflows were present to audit; this avoids workflow findings but provides no evidence of automated CI or release safeguards.