homedistil/eloquent-mockery

Release historycaution

The package has only one release, published about five months ago, so its maintenance track record is still unproven.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite being a young project; this weakens evidence of ongoing maintenance.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; the missing scanning is a modest process gap alongside the documented workflow concerns.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence of a vulnerability.

Workflow auditcaution

All 6 of 6 GitHub Actions references are unpinned, which reduces build reproducibility. No dangerous triggers, untrusted checkouts, script injection, or auditor findings were reported, which limits the concern to workflow hygiene.