nyholm/psr7

Release historycaution

The package has been established since 2017 with 24 releases, but it has had no registry release in the last 12 months; the latest release was about 18 months ago. This is a meaningful maintenance concern, though not evidence of abandonment by itself.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. That recent inactivity lowers confidence in prompt fixes, although the repository was pushed more recently and the assessed release has documented changes.

Repo issue activitycaution

Only four issues and one pull request are open, but there were no new or closed issues or pull requests in the last month. This supports the picture of a quiet project rather than active ongoing maintenance.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not severe enough to make the package unfit on its own.

Token permissionscaution

None of the four workflows declares top-level token permissions, so their permissions are less explicit than ideal; no workflow requests top-level write access, which limits the severity of this hygiene gap.