advancedideasmechanics/mezzio-ga-measurement-protocol

Release historycaution

The package is only 92 days old and all five releases occurred within roughly 15 minutes, so there is limited evidence of sustained maintenance beyond its initial release burst.

Security policycaution

The repository has no published security policy, which leaves vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The single analyzed workflow grants top-level write permissions, leaves all 9 action references unpinned, and uses archived actions with high-confidence medium-severity findings. The audit was complete and found no untrusted checkout or script-injection path, limiting the impact to workflow hygiene rather than a severe release risk.