contenir/contenir-workflow-laminas-mvc

Release historycaution

Sixteen releases were published on the same day and the package is only 0 days old, showing active initial publishing but providing no long-term release track record.

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. Because the package is newly published and the repository was recently pushed, this is a meaningful but not conclusive maintenance concern.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest gap in repository hygiene.

Security policycaution

The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.

Workflow auditcaution

The sole workflow has one high-confidence medium-severity secrets-inherit finding and its only action use is unpinned. The workflow has no untrusted checkout or script-injection sink, so these are hygiene concerns rather than severe supply-chain risk.