friends-of-behat/service-container-extension

Release historycaution

The package is mature at about 10 years old, but it has only 7 releases and 1 release in the last 12 months, indicating a deliberately slow cadence rather than active development.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months. Although the release was recent, the absence of subsequent activity is a maintenance caution.

Security policycaution

The repository has no published security policy. This is a transparency gap, although the available Psalm tooling provides some compensating quality coverage.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 10 action references are unpinned, leaving them exposed to upstream reference changes.