mpp/message-bundle

Release historycaution

The package has existed since November 2020 and released once in the last 12 months, but nine releases over that period indicate a modest maintenance cadence rather than rapid ongoing development.

Repo commit activitycaution

There were no commits and no active maintainers in the three months measured, which weakens evidence of ongoing maintenance, although the repository was updated for the current release.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a meaningful repository hygiene gap.

Security policycaution

The repository has no published security policy, so the process for reporting and handling vulnerabilities is not documented.

Workflow auditcaution

No GitHub Actions workflows were present, so the audit found no workflow hazards; it also provides no evidence of automated CI or security checks.