libresign/behat-tsa-extension

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, with the last push about five months ago. For a young package, this leaves sustained maintenance uncertain.

Release historycaution

The package has only two releases, both published within about two hours, and no later release activity over its roughly five-month lifetime. That is limited evidence of sustained maintenance.

Repo popularitycaution

The repository has zero stars, forks, and watchers. This provides no supporting adoption evidence, though the package is young and popularity is not decisive on its own.

Repo toolingcaution

Composer is used as the build tool, but no security-scanning tools are configured. The missing scanning is a transparency gap, though it is not by itself evidence that the package is unsafe.

Repository archivedcaution

The linked repository is not archived, although its last push was about five months ago, consistent with the inactivity shown by commit activity.