abenevaut/phpunit-slicer

Release historycaution

The package has 19 releases over about four and a half years, but none in the last 12 months; the latest release was roughly 20 months ago. This is meaningful evidence of slowed maintenance despite its earlier release history.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months, consistent with the long release gap. No newer activity is provided to offset the maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a transparency gap, but it is not evidence that the package is unsafe on its own.

Workflow auditcaution

All 5 analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. The pull_request_target trigger has no untrusted checkout or script-injection sink, and one workflow scopes permissions at job level, limiting the risk.