marcin-orlowski/phpunit-extra-asserts

Release historycaution

The package has 20 releases since November 2019, but none in the last 12 months; the latest release was over two years ago. Its historically regular cadence provides some maturity, but the current pause raises maintenance concerns.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. Combined with the last push being over two years ago, this is a meaningful abandonment risk despite the repository remaining available.

Repo popularitycaution

The repository has only 3 stars, 0 forks, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it indicates a small external user base and limited visible adoption.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. That is a moderate transparency and maintenance gap, not a standalone reason to reject the release.

Workflow auditcaution

All 4 workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, injection findings, or high-severity issues. However, all 9 action references are unpinned, leaving the workflow supply chain less reproducible.