sidroberts/phalcon-authmiddleware

Release historydanger

The package has released only four times since 2016, with no releases in the last 12 months; its latest registry release was about six years ago. This is a substantial maintenance concern, though the repository is not archived.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The non-archived status and a push in 2025 provide some counterweight, but current development activity remains unclear.

Security policycaution

No security policy is present in the linked repository. This is a modest transparency gap for a middleware library, although the project is small and no other security-process evidence was provided.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous sinks or audit findings, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure without indicating an immediate severe risk.