methorz/mezzio-hexagonal-skeleton

Licensecaution

The release includes license files and a repository license, but the artifact identifies BSD-3-Clause while the manifest declares MIT. That mismatch needs clarification before relying on the package.

Release historycaution

Seven releases arrived within about two days, but no newer registry release has appeared for roughly nine months. For a package less than a year old, this indicates uncertain ongoing maintenance.

Repo toolingcaution

The project uses Make and Composer for builds, but no security scanning tools are present. This is a transparency and maintenance gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, leaving the preferred process for reporting and handling vulnerabilities undocumented. This modestly reduces transparency.