contenir/contenir-asset-mezzio

Release historycaution

This is the package's first release, published less than 1 hour ago, so there is no track record for release consistency or long-term maintenance.

Repo commit activitycaution

No commits or active maintainers were observed in the prior 3 months, but the package is less than 1 hour old, so this is better interpreted as limited history than as collapsed maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no security policy, which reduces transparency for reporting vulnerabilities and handling maintenance issues.

Workflow auditcaution

Both workflows use unpinned actions, and the audit found a high-confidence medium-severity secrets-inherit issue; there are no dangerous untrusted triggers or write-wide top-level permissions, which limits the impact.