mezzio/mezzio-tooling

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk; the organization-owned repository provides some ability to hand maintenance off, but no second recent contributor is shown.

Repo commit activitycaution

Only one commit was made by one active maintainer in the last three months, indicating limited recent development activity despite the recent release and merged pull request.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a security-hygiene gap without making the package unfit to use.

Token permissionscaution

Neither workflow declares top-level token permissions, so least-privilege intent is not explicit; however, no workflow is shown requesting top-level write access.