contenir/contenir-errors-mezzio

Release historycaution

This package is brand new: it has three releases, all within roughly 3 minutes, so there is not yet a meaningful maintenance record. The rapid initial releases are not themselves a problem, but long-term activity remains unproven.

Repo commit activitycaution

There were no commits or active maintainers during the last 3 months. Because the repository and package are newly created, this is more a lack of established evidence than proof of abandonment.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. This is a modest transparency and hygiene gap rather than a direct adoption blocker.

Security policycaution

The repository has no security policy. That weakens the documented vulnerability-reporting process, although the available release and source documentation partly compensate for the gap.

Workflow auditcaution

Both workflows were analyzed without trigger or script-injection issues, but all 2 action references are unpinned and a high-confidence medium-severity secrets-inherit finding exposes credentials more broadly than necessary. These are avoidable workflow hygiene risks.