marcguyer/version-middleware

Repo commit activitydanger

There were no commits and no active maintainers in the three months before collection. Combined with the single-release history, this points to a dormant project and raises abandonment risk.

Licensecaution

A license file is present, but the manifest declares BSD-3-Clause while the artifact license file is detected as MIT. The mismatch reduces transparency even though the release is licensed.

Release historycaution

The package has had only one release, 0.0.1, published about 7 years ago, with no releases in the last 12 months. This is strong evidence of limited maintenance, although the repository was pushed more recently.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. The missing scanner is a modest hygiene gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a small middleware library this is a transparency gap, though the presence of tests and a clear README provides some compensating project documentation.