contributte/codeception

Repo bus factorcaution

One contributor made all commits in the last three months, concentrating recent maintenance in a single person. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.

Repo commit activitycaution

Only one commit was recorded in the last three months, so recent maintenance activity is limited despite the recent release and August repository push.

Repo toolingcaution

The project uses Composer and Make, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkout or script-injection findings, but all eight action references are unpinned and a high-confidence medium-severity secrets-inherit finding affects the coverage workflow.