wyrihaximus/react-http-middleware-custom-request-body-parsers

Lifecycle scriptscaution

The package declares post-install and post-update Composer scripts, which execute during dependency operations and increase the amount of publisher-controlled code run by consumers.

Release historycaution

The latest registry release was published in January 2023, with no releases in the last 12 months and a median interval of about 384 days. This indicates slow release maintenance, although the long package history provides some maturity evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. That weakens evidence of ongoing maintenance despite the repository not being archived.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting and handling, though it does not by itself show that maintenance has stopped.

Workflow auditcaution

All 22 analyzed action references are unpinned, and the audit found a medium-confidence template-injection issue in ci.yml. No untrusted checkout or script-injection trigger was found, so these are hygiene concerns rather than a severe workflow risk.