thomasvargiu/laminas-messenger

Release historycaution

The package has seven releases since January 2020, but none in the last 12 months; this indicates a meaningful maintenance slowdown for a beta release.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. Together with the absence of registry releases for 12 months, this raises abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, though the repository does use Dependabot and Psalm.

Version stabilitycaution

Version 2.0.0-beta4 is still a prerelease, and prereleases make up 4 of the 7 recent releases. That reduces API stability and maturity despite the stable major number.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings, no untrusted checkouts, and no script injection. However, all 7 action references are unpinned, which is a supply-chain hygiene weakness.