testo/assert

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which weakens confidence in ongoing maintenance despite the recent registry releases.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, reducing clarity about how vulnerabilities should be reported and handled.

Version stabilitycaution

Version 0.1.17 is not a stable major release, so its API may still change even though it is not marked prerelease.

Workflow auditcaution

The single workflow uses a pull_request_target trigger without an observed untrusted checkout or script-injection sink, but it grants top-level write permissions and uses its only action unpinned.