avaibook-nelmio/api-doc-bundle

Release historydanger

The package has had no releases in the last 12 months, and its latest release was about three years and six months ago. The 89-release history shows prior activity but does not offset the current abandonment concern.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, reinforcing the long period without releases and materially increasing abandonment risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all five action references are unpinned. This is a workflow hygiene risk, not a standalone reason to reject the package.