php-di-definitions/dummy

Release historydanger

The package has had no release in about four years and nine months, with zero releases in the last 12 months. Its four-release history shows a real abandonment concern despite the package's small testing-focused scope.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the release history showing no releases since January 2022. This materially raises abandonment risk.

Lifecycle scriptscaution

Composer install and update lifecycle scripts are present, so installation can execute package-defined commands. This is a supply-chain hygiene concern, although the signal does not show that the scripts are harmful.

Security policycaution

No repository security policy is present. This is a minor transparency gap for a small package and does not outweigh its otherwise clear source and licensing information.

Workflow auditcaution

All four workflows were analyzed with no untrusted checkouts or script injections, but all 16 action references are unpinned and the audit found a medium-confidence template-injection pattern in CI. These are build-hygiene concerns rather than a severe risk on their own.