laminas/laminas-diactoros

Release historycaution

The package has existed since 2019 with 148 releases, but only two releases occurred in the last 12 months, indicating a mature project with a currently modest release cadence.

Repo bus factorcaution

All two recent commits came from one contributor. Organization backing reduces the risk compared with an individual-owned project, but no second recently active contributor is shown.

Repo commit activitycaution

Only two commits were made in the last three months by one active maintainer, which is thin recent maintenance activity and lowers confidence in continuity.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected, leaving a security-process gap that is partly offset by the separate security policy and clean workflow-risk signals.

Token permissionscaution

All three workflows lack top-level permissions declarations. No workflow requests top-level write access, but explicit least-privilege declarations would provide stronger CI transparency.