php-xapi/json-test-fixtures

Release historycaution

The package was last released in October 2016, with no releases in the past 12 months. The linked repository was pushed more recently, but this specific release is notably old.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. The newer repository push partly offsets this, but recent maintenance is not evident.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected. For a data-only fixture package this is a modest transparency gap rather than a severe risk.

Security policycaution

The repository has no security policy. This limits vulnerability-reporting transparency, though the package's fixture-only scope reduces the practical impact.

Workflow auditcaution

The single workflow was fully analyzed with no audit findings or untrusted triggers, but both action references are unpinned, leaving them exposed to upstream reference changes.