eliashaeussler/typo3-codeception-helper

Repo bus factorcaution

All recent commits come from one contributor, with a 100% top-contributor share. The package is personally owned rather than organization-backed, so maintainer unavailability would create a meaningful continuity risk.

Security policycaution

The repository has no security policy. That does not show a vulnerability, but it leaves reporting and response expectations less transparent for a dependency.

Workflow auditcaution

Both workflows were fully analyzed with no untrusted checkouts, script injection, audit findings, or unpinned actions. One release workflow grants top-level write permission, a mild hygiene concern without an untrusted trigger or sink.