riverline/multipart-parser

Repo commit activitycaution

The repository recorded no commits and no active maintainers during the last three months. This is a maintenance concern, although the recent release provides some compensating evidence.

Repo toolingcaution

Composer is used for the build, but no security scanning tooling is reported. The absence of scanning is a hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a library that parses multipart content.

Workflow auditcaution

The only workflow was fully analyzed, uses read-only permissions, and has no dangerous sinks or audit findings. However, both action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.