wyrihaximus/react-http-middleware-with-headers

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These scripts add installation-time behavior and warrant review, but their presence alone is not evidence of poor package health.

Release historycaution

The package has only three releases and none in the last 12 months; the latest release was about two years ago. This is a meaningful maintenance concern, although recent repository activity partly offsets abandonment risk.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months. Recent pull requests show some activity, but the lack of commits still weakens evidence of ongoing maintenance.

Security policycaution

No security policy is published in the repository. This is a transparency gap for a package handling HTTP middleware, though it is not by itself a severe dependency risk.

Workflow auditcaution

Both analyzed workflows use top-level write permissions, broader than necessary, but the audit found no untrusted checkout, script injection, unpinned action, or other reported workflow issue.