phpunit/php-invoker

Package scaffoldingcaution

The package includes a README and changelog, and the repository has tests. However, this release explicitly states that it is no longer supported on PHP 8.3, which limits adoption.

Repo bus factorcaution

All recent commits came from one contributor, concentrating maintenance knowledge and increasing continuity risk. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset that concentration.

Repo commit activitycaution

The repository recorded two commits in the last three months, so maintenance has not stopped, though the pace is modest.

Repo toolingcaution

The project uses Composer and Phing for builds, but no security-scanning tooling was detected. This is a modest transparency gap rather than a severe dependency risk.