codeception/module-soap

Release historycaution

The package has seven releases since October 2019, but none in the last 12 months and the latest registry release was in February 2023. That is a meaningful maintenance concern despite the repository having a later push.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry release in the last 12 months, this indicates slowing visible maintenance.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene gap, not evidence of unsafe code.

Security policycaution

The linked repository has no security policy. That weakens vulnerability-reporting transparency for a package intended to be installed as a dependency.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or injection findings, and it has no top-level write permissions. However, all three analyzed action uses are unpinned, leaving avoidable workflow supply-chain exposure.