middlewares/method-override

Release historycaution

The package has existed for about 10 years with 11 releases, but it has had no release in the last 12 months; the latest release was about 18 months before collection.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection, reinforcing the concern raised by the lack of recent releases.

Repo toolingcaution

The repository uses Composer, but no security-scanning tool was detected. That is a modest transparency gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unspecified. This is a documentation gap, partly offset by the package's small scope and established structure.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, and the workflow lacks a top-level permissions block, creating a minor reproducibility and workflow-hygiene concern.