oihana/php-middleware

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For middleware handling security-related concerns, that is a modest maintenance and assurance gap.

Security policycaution

The repository has no security policy. This weakens disclosure transparency for a package that includes CSRF, webhook, and security-header helpers.

Version stabilitycaution

Version 0.7.1 is not a stable major release, so the API may still change, but it is not a prerelease and recent releases contain no prerelease share.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 3 action references are unpinned, leaving them exposed to upstream changes; the absence of a top-level permissions block is acceptable on its own.