contenir/contenir-maintenance-mezzio

Release historycaution

This is a newly published package with four releases on the collection date, so the release history is too short to demonstrate long-term maintenance, but it does not indicate abandonment.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe maintenance.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented. This is a maintenance and transparency gap, not a health verdict by itself.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned and the CI workflow inherits secrets with high-confidence medium severity. The missing top-level permissions blocks are acceptable on their own.