mcustiel/phiremock-codeception-extension

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, despite a release during the broader 12-month period. This suggests maintenance may be intermittent and increases abandonment uncertainty.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities. This lowers transparency for a package used in automated test environments.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and it does not grant top-level write permissions. However, both of its action references are unpinned, leaving the workflow exposed to upstream reference changes.