friends-of-behat/mink-debug-extension

Repo bus factorcaution

All three recent commits came from one contributor, creating a thin active maintainer base. Organization ownership provides some handoff capacity, but no second active contributor is evidenced.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear for users and maintainers.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all six action references are unpinned, which weakens CI reproducibility and supply-chain hygiene.