helmich/phpunit-json-assert

Project backingcaution

The repository is owned by an individual rather than an organization, so the single registry maintainer is not backed by a visible organizational publishing structure. The long-lived project and recent release provide some compensation.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. The recent release and release notes partly offset this, but the current development pause remains a maintenance concern.

Security policycaution

The repository has no security policy. For a small assertion library this is a transparency gap, though it is less consequential than missing maintenance or an archived repository.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 5 action references are unpinned, which is a supply-chain hygiene weakness.