artyuum/request-dto-mapper-bundle

Release historycaution

The package has made only three releases since February 2021, with no releases in the last 12 months and the latest published in December 2022. This is a substantial maintenance concern for a framework integration package.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which supports the evidence of inactive maintenance. The repository is not archived, but that does not offset the lack of recent activity.

Security policycaution

No security policy is present in the repository. For a package that processes application request data, this is a transparency gap, though it is not evidence of a security defect.

Workflow auditcaution

The single workflow has read-only permissions and no audited injection or high-severity findings, but both referenced actions are unpinned. That weakens build reproducibility without indicating an immediate severe risk.