sorge-it/phpunit-pest-html-assertions

Release historycaution

The package is less than one day old with only two releases, so there is not yet enough history to establish mature release practices. This may reflect a newly launched project rather than abandonment.

Repo commit activitycaution

The repository records zero commits and zero active maintainers over the last three months, leaving sustained maintenance unproven. Because the package is less than one day old, this is an evidence gap more than clear abandonment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. For a newly published library this is a modest supply-chain hygiene gap, not a severe risk.

Security policycaution

The repository has no security policy, reducing transparency for reporting vulnerabilities. The small, newly created project provides limited context that would otherwise compensate for this gap.

Workflow auditcaution

The one workflow was fully analyzed with no audit findings, no untrusted checkouts or script injection, and read-only permissions; however, both of its two action references are unpinned, leaving avoidable update risk.