ro/hex-use-case-orchestrator

Release historydanger

The package has had no releases in more than four years: its latest release was March 26, 2022, with zero releases in the last 12 months. This is strong evidence of abandonment risk for a Laravel library.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months. Combined with the last push in 2022, this indicates the project is no longer receiving active maintenance.

Repo package mentioncaution

The repository name matches the package name, supporting that the linked source belongs to this package. Its README does not mention the package explicitly, a minor transparency weakness rather than evidence of repository misattribution.

Version stabilitycaution

The release is presented as v2.5.3, while the collected stability profile reports v2.2.2 as the latest version. That inconsistency weakens release transparency and warrants caution alongside the stale release history.

Workflow auditcaution

The only workflow uses pull_request_target with an untrusted checkout, which creates a meaningful exposure to untrusted code, and all 9 action references are unpinned. The audit found no high-confidence rule findings, but these workflow practices still reduce supply-chain hygiene.