uru/bitrix-mvc

Release historycaution

The package has 14 releases since June 2021, but none in the last 12 months; its latest registry release was about 19 months ago. This is a meaningful maintenance concern despite the established release history.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. That recent inactivity lowers confidence in ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy. For a library handling application and database integrations, this makes vulnerability reporting and maintenance expectations less clear.

Workflow auditcaution

The workflow uses read-only permissions and has no detected dangerous audit findings, but both action references are unpinned. That leaves a supply-chain hygiene gap in the build process.