ik-oss/mezzio-debugbar

Release historycaution

The package is 0 days old with only two releases, so there is not enough history to demonstrate sustained maintenance or reliable release behavior.

Repo commit activitycaution

The repository shows 0 commits and 0 active maintainers in the last 3 months. Because the project is only 0 days old, this is weak evidence of abandonment but still leaves ongoing maintenance unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools are reported, leaving a modest transparency and assurance gap.

Security policycaution

No repository security policy is provided, which reduces the project's transparency for reporting and handling vulnerabilities.

Workflow auditcaution

The workflow was fully analyzed, uses read-only job permissions, and has no injection or high-severity findings. However, all 6 of 6 action references are unpinned, creating a supply-chain hygiene weakness.