imbo/behat-api-extension

Repo bus factorcaution

One contributor made all four recent commits, creating a meaningful single-maintainer dependency risk. Organization backing provides some handoff capacity but does not remove the current concentration.

Repo commit activitycaution

Four commits occurred in the last three months, but all were made by one active maintainer; activity is present yet narrow.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving security checks less visible than the rest of the project hygiene.

Security policycaution

The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.

Workflow auditcaution

The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, so their versions can change without a repository change.