fduarte42/laminas-static-files

Release historycaution

The package has had no releases in about 15 months, despite being nearly five years old. Its nine-release history shows it reached a stable release, but the current gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. The June 2025 release provides some recent provenance, but current maintenance capacity is not demonstrated.

Security policycaution

The linked repository has no security policy. For a middleware package that handles application asset requests, this is a transparency gap, although it is not evidence of unsafe behavior by itself.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Both action references are unpinned, which weakens build reproducibility, while the absence of a top-level permissions block is acceptable on its own.