smartassert/worker-client

Dependency profilecaution

Seven runtime dependencies are declared, including standard PSR interfaces and related SmartAssert packages. This is a meaningful dependency surface but not unusually large for a PHP client.

Maintainerscaution

Only one account has registry publishing access, which is a narrow publishing base. Organization backing and recent release activity provide some compensation, but administrative access does not establish active maintenance.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months, a significant maintenance warning. Recent releases and merged pull requests partly offset this, but the lack of recent commits still raises abandonment risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

All three workflows lack top-level token permissions declarations. No workflow requests top-level write access, but explicit least-privilege settings would provide stronger CI transparency.