drunomics/multisite-request-matcher

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk even though the specific release is not separately withdrawn.

Release historydanger

The latest release was on March 30, 2023, and there were no releases in the last 12 months. That long release gap materially raises abandonment risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent repository push is shown elsewhere, but it does not demonstrate ongoing commit activity.

Security policycaution

The linked repository has no security policy. This weakens vulnerability-reporting transparency, though it is secondary to the package's abandoned registry status.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but both of its two action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.