selective/test-traits

Repo commit activitycaution

No commits and no active maintainers were recorded in the last three months. The recent release and repository push partly offset this, but the quiet interval remains a maintenance caution.

Repo toolingcaution

The repository uses Composer build tooling, but no security-scanning tool was detected. For a small PHP testing utility this is a modest transparency gap rather than a severe dependency risk.

Security policycaution

The repository has no security policy. This reduces transparency about vulnerability reporting, though the package's narrow development-tool scope limits the practical impact.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings. Both action references are unpinned, which leaves avoidable build-integrity exposure, while the lack of a top-level permissions block is acceptable on its own.