orchestra/testing

Release historydanger

The package has 39 releases since 2015, but its latest registry release was in August 2020 and it has had no releases in the last 12 months. This is strong evidence of abandonment risk for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers over the last three months, with its last push in April 2021. The prolonged lack of activity materially lowers confidence in ongoing maintenance.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tools were detected. The missing scanning is a modest hygiene gap, not evidence that the package is unsafe or abandoned on its own.

Security policycaution

The repository has no documented security policy. This weakens transparency around vulnerability reporting, although it is less significant than the package's prolonged inactivity.

Workflow auditcaution

Both workflows were analyzed without failed files or dangerous sinks, and no high- or medium-severity findings were reported. However, all six action references are unpinned, leaving a supply-chain hygiene gap.