snicco/content-negotiation-middleware

Maintainerscaution

Only one account has registry publish access, which is a limited publishing base. The organization-backed repository provides some compensation, so this is a mild concern rather than a severe risk.

Release historycaution

The package has 33 releases since April 2022, but none in the last 12 months and the latest release was about two years ago. This materially raises maintenance and abandonment concerns.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the lack of recent releases, this supports a meaningful maintenance concern.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the package is unsafe.

Security policycaution

The linked repository has no security policy. This reduces transparency around vulnerability reporting and handling, though it is not by itself evidence of abandonment.