codeception/lib-asserts

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, indicating a recent pause in development despite the latest release being current in the release history.

Security policycaution

The repository has no security policy. This is a transparency gap, though the package’s license, tests, release notes, and organization backing provide other maintenance evidence.

Workflow auditcaution

Both workflows were fully analyzed with no unsafe-checkout or injection findings, but all 6 action references are unpinned and one workflow grants top-level write permissions, creating a moderate reproducibility and token-scope hygiene gap.