ecphp/reverse-proxy-helper-bundle

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, indicating that repository work has effectively stopped. Combined with the old last release, this is the main ongoing-maintenance concern.

Release historycaution

The package has seven releases but no releases in roughly five years, making current compatibility and continued maintenance uncertain. Its short historical release intervals show that it was actively developed initially, but do not compensate for the long subsequent gap.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, although the repository does use Dependabot and Psalm.

Token permissionscaution

Neither workflow declares top-level token permissions, so the repository does not clearly document least-privilege GitHub Actions access. No workflow is shown using top-level write permissions, limiting the severity of this hygiene concern.