testo/codecov

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months. The mirror description and frequent releases partly explain this, but the linked repository itself shows no recent development activity.

Repo toolingcaution

Composer is used for the build, but no security scanning tool was detected, leaving a modest repository hygiene gap.

Security policycaution

No security policy was found, reducing transparency for reporting vulnerabilities, although this is not by itself evidence of poor maintenance.

Version stabilitycaution

Version 0.2.4 is not a stable major release, so its API may still change even though it is not marked as a prerelease.

Workflow auditcaution

The single workflow has top-level write permissions and one unpinned action, which weakens workflow hygiene. No untrusted checkout, script injection, or auditor findings were detected, so this is not a severe workflow risk.