ik-oss/mezzio-navigation

Release historycaution

The package is 0 days old with only two releases, so there is not enough release history to demonstrate maturity or sustained maintenance.

Repo commit activitycaution

No commits or active maintainers were measured in the last three months; because the package is newly published, this is weak evidence of abandonment but still leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, reducing the clarity of its vulnerability-reporting process.

Workflow auditcaution

The workflow audit completed fully and found no untrusted checkouts or script injection, but all eight action uses are unpinned. It also reported a low-confidence cache-poisoning pattern, which is a hygiene concern rather than a severe risk on its own.