shopsys/phpunit-injector

Release historycaution

Three releases have been published over roughly three months, with a median interval of about 38 days. However, the latest release was about seven months ago, so current maintenance is not fully demonstrated.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. Combined with the roughly seven-month gap since the latest release, this is a meaningful maintenance concern.

Repo toolingcaution

The project uses Composer, Make, and Box for builds, but no security scanning tools were detected. This is a transparency and assurance gap, though it is not by itself evidence that the package is unsafe.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.

Token permissionscaution

The only analyzed workflow does not declare top-level token permissions. Although no write permissions or dangerous workflow patterns were observed, explicitly limiting workflow tokens would provide stronger supply-chain hygiene.