richcongress/test-tools

Lifecycle scriptscaution

The package defines post-install and post-update Composer scripts. These increase installation complexity and the code executed during dependency operations, so they are a modest hygiene concern.

Release historycaution

The package has only 5 releases and none in the last 12 months; its latest registry release was over two years ago. This is a meaningful maintenance concern, although the linked repository was pushed more recently.

Repo commit activitycaution

There were no commits and no active maintainers in the three months before collection. Although the repository has a recent push, the observed short-term development activity is weak.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected. This limits automated coverage of dependency and code risks.

Security policycaution

The repository has no security policy. That reduces transparency about how vulnerabilities should be reported and handled, though it does not by itself show unsafe code.