arachne/codeception

Registry deprecationdanger

Packagist marks the package abandoned at package scope and names contributte/codeception as its replacement, making this release a poor default dependency choice.

Release historycaution

The package has 37 releases since 2014, but its latest registry release was about five years ago and there were no releases in the last 12 months. Recent repository activity partly offsets the staleness but not the release gap.

Repo bus factorcaution

All recent commits came from one contributor, leaving no demonstrated short-term contributor redundancy. Organization backing provides some handoff capacity but does not remove the concentration concern.

Repo commit activitycaution

Only one commit from one active maintainer was recorded in the last three months. That is some activity, but it indicates a very low current maintenance pace.

Workflow auditcaution

All 8 of 8 action references are unpinned, and the audit found a high-confidence medium-severity secrets-inherit issue in coverage.yml. No dangerous trigger or untrusted checkout was detected, but the workflow hygiene is weak.