webignition/internet-media-type

Release historycaution

The latest release was in October 2021, with no releases in the last 12 months. This long release gap lowers confidence in ongoing maintenance, although the package has a substantial release history.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, consistent with the release gap since October 2021. This is a meaningful abandonment concern, though not evidence that the package is unfit on its own.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a maintained library this is a transparency and vulnerability-detection gap.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear, although it does not by itself indicate unsafe code.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 13 action references are unpinned, leaving workflow dependencies exposed to upstream changes.