mezzio/mezzio-authorization

Release historycaution

The package has 19 releases over about six years, but only one release in the last 12 months and a median interval of about 126 days, indicating a slow cadence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning even though a recent release and push show the project is not clearly abandoned.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while two issues and two pull requests remain open, suggesting limited current project activity.

Repo toolingcaution

The repository uses Composer build tooling but reports no security scanning tools, leaving a modest tooling gap for supply-chain transparency.

Workflow auditcaution

All three workflows were analyzed with no audit findings or untrusted checkout and script-injection sinks. Two of three action references are unpinned and one workflow has top-level write permissions, creating a modest reproducibility and permission-hygiene concern.