contenir/contenir-workflow-mezzio

Release historycaution

The package is only 0 days old, with 3 releases in roughly 3 hours, so there is not yet enough history to demonstrate durable maintenance. The rapid initial release activity is mildly reassuring but does not offset the lack of a longer record.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Because this release and repository are newly observed and 4 pull requests were merged in the last month, this is a maintenance-confidence concern rather than evidence of abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest repository hygiene gap, not a standalone dependency risk.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe to depend on.

Workflow auditcaution

All 1 workflow was analyzed with no untrusted checkout or script-injection findings, but its only action is unpinned and the high-confidence medium-severity audit found secrets inherited by a reusable workflow. These are concrete CI supply-chain and credential-scope hygiene concerns.