elephox/mimey

This is a focused package with a clear README and only two runtime dependencies. Tests, release notes, and the matching source repository add useful transparency; pin 4.0.9 if you need this exact mapping.

Latest 4.0.9

Packagist

79%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last 3 months. The same-day release and recent release history partly compensate, but the current development pause is a maintenance caution.

Repo tooling

Composer is used for the build, but no security scanning tool is reported. For this small package that is a hygiene gap rather than evidence of abandonment.

Security policy

The repository has no security policy. This reduces transparency for reporting vulnerabilities, although the package's narrow scope limits the practical impact.

Workflow audit

All three workflows were analyzed without detected audit findings, untrusted checkouts, or script injection. However, all 11 action references are unpinned, leaving avoidable action-version supply-chain exposure.