teamneusta/pimcore-http-cache-bundle

Release historycaution

Only two releases have been published over 228 days, with a median interval of about 83 days. This is limited release history, though repository activity provides compensating evidence of ongoing work.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Version stabilitycaution

Version v0.7.1 is not a stable major release, so the API may still change; it is not a prerelease, which partly reduces that concern.

Workflow auditcaution

Both workflows use read-only permissions, have no untrusted checkout or script-injection findings, and the audit completed fully. However, all six action references are unpinned, creating a supply-chain hygiene gap.