encore-labs/guzzle-bundle-header-forward-plugin

Dependency profilecaution

Seven runtime dependencies are substantial for a small integration plugin, including Guzzle, the Guzzle bundle, and several Symfony components. They are relevant to the package's stated purpose, so this is a manageable rather than severe concern.

Repo bus factorcaution

All recent commit activity came from one contributor, creating a thin operational base. Organization ownership provides some ability to hand maintenance off, so this is a caution rather than a severe abandonment risk.

Repo commit activitycaution

The repository recorded one commit in the last 3 months from one active maintainer. Recent activity is positive, but the very low volume limits evidence of sustained maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This weakens automated supply-chain oversight without outweighing the package's recent releases, tests, and active repository.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, but not evidence that the package is unsafe to use.