mathisburger/phpunit-stopwatch

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old last push, this is strong evidence that maintenance has stopped or become dormant.

Release historycaution

The package has only one release, published nearly four years ago, with no releases in the last 12 months. Its stable version and focused scope reduce compatibility uncertainty, but the lack of release history limits evidence of ongoing maintenance.

Repo toolingcaution

Composer is used for the build, but no security scanning tools are configured. For a small library this is a transparency and hygiene limitation rather than a standalone reason to reject the release.

Security policycaution

The repository has no security policy. This weakens vulnerability-reporting transparency, although the package's small scope and available source repository partly limit the practical impact.

Workflow auditcaution

The single workflow was fully analyzed with no detected injection or high-severity findings, but both action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions leave avoidable build-integrity risk.