integratedexperts/behat-steps

Registry deprecationdanger

Packagist marks the package as abandoned at package scope, with the listed replacement pointing to the same package. This is a serious adoption and continuity warning even though the repository remains active.

Dangerous workflowscaution

One workflow uses pull_request_target, which warrants review because it runs with elevated workflow context. No untrusted checkout or script-injection patterns were detected, limiting the concern.

Repo bus factorcaution

All 54 recent commits came from one contributor, giving the project a complete short-term contributor concentration. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activitycaution

The repository recorded 54 commits in the last three months, showing active maintenance. However, only one maintainer was active during that period, so continuity remains dependent on a single person.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. The missing scanner is a modest transparency and assurance gap rather than evidence that the package is unsafe.