syberisle/mock-php-stream

Release historycaution

The package has four releases since June 2018 and none in the last 12 months; the latest release was in April 2025. This indicates a slow cadence, though the focused package may not require frequent releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, but it does not by itself establish abandonment because the latest release and repository update were in April 2025.

Repo toolingcaution

Composer is used for the build, showing basic project tooling, but no security-scanning tool was detected. The missing scanning is a transparency gap rather than evidence of an unsafe release.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout, script injection, or high-confidence audit findings. However, all three action references are unpinned, which weakens build reproducibility and supply-chain hygiene; the absence of a top-level permissions block is acceptable on its own.