innmind/media-type

Repo bus factorcaution

One contributor made all four commits in the last three months, so current maintenance depends entirely on one active person. Organization backing provides some handoff capacity, but the recent contribution base is still concentrated.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small library this is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy. That reduces transparency for reporting and handling vulnerabilities, although it does not by itself indicate unsafe code.

Workflow auditcaution

All three workflows were analyzed without untrusted checkout or script-injection findings, but all six action references are unpinned and two high-confidence medium-severity findings pass inherited secrets to reusable workflows. These are meaningful workflow hygiene risks, though not severe on their own.