laminas-api-tools/api-tools-http-cache

Release historycaution

The package has 12 releases but none in the last 12 months; its latest registry release was nearly five years ago. This is a meaningful maintenance concern despite the repository having a recent push.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. A recent repository push is a compensating sign, but the current contribution activity remains thin.

Repo issue activitycaution

There is one open issue and two open pull requests, but no issues or pull requests were opened or merged in the last month. This provides little evidence of active ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency gap rather than a severe dependency risk.

Workflow auditcaution

Both workflows were analyzed successfully with no reported audit findings or untrusted checkouts, and neither grants top-level write permissions. However, all 8 analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene.