pheature/mezzio-toggle

Release historydanger

The package has had no release in over three years, despite a roughly monthly median interval across its eight releases. This strongly raises abandonment risk.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating inactive maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. Dependabot and Psalm provide some compensating security hygiene.

Version stabilitycaution

Version 0.7.1 is not a prerelease, but the 0.x major version signals that compatibility may still change before 1.0. This is a secondary concern beside the maintenance inactivity.

Workflow auditcaution

All 13 analyzed action references are unpinned, weakening build reproducibility and update control. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings.