middlewares/cache

Release historycaution

The package has existed since 2016 with 13 releases, but it has had no release in the last 12 months; the latest release was about 18 months ago. This indicates slowing maintenance, though the long history provides some maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the lack of releases in the last year, this is evidence of stalled maintenance.

Repo toolingcaution

The project uses Composer build tooling, but no security-scanning tools were detected. For a small PHP middleware package this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 5 action references are unpinned, leaving avoidable dependency-update risk.