hamcrest/hamcrest-php

Release historycaution

The package has existed since 2013 with 10 releases, but only one release in the last 12 months and a median interval of about 254 days indicate a deliberately slow cadence.

Repo commit activitycaution

Two commits from two active maintainers in the last three months show some current activity, though the volume is modest for a mature project.

Repo toolingcaution

Composer is used for builds, but no security-scanning tool was detected, leaving a modest transparency gap.

Security policycaution

No repository security policy was found, which weakens guidance for reporting and handling security issues but is not a direct dependency risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, reducing build reproducibility.