contenir/contenir-maintenance-laminas-mvc

Release historycaution

All 8 releases were published within the same day and the package is 0 days old, so there is not yet evidence of sustained release maintenance.

Repo commit activitycaution

There were no commits or active maintainers in the prior 3 months, but the package was only released today and the repository shows 5 merged pull requests in the last month; long-term activity remains unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.

Security policycaution

The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but it has one high-confidence medium-severity secrets-inherit finding and its only action use is unpinned.