thunder/drupal-testing

No commits or merged pull requests were recorded in the last three months, and all 15 workflow actions are unpinned. Regular releases, a maintained organization-owned repository, tests, and release notes provide useful counterweight.

Latest 3.0.1

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. The recent release history partly offsets this, but the lack of current development activity raises maintenance risk.

Repo issue activity

There were no newly opened or closed issues and no merged pull requests in the last month, while five pull requests remain open. This is a modest sign of limited recent project activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected. That is a transparency and hygiene gap rather than evidence that the package is unsafe.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear for consumers and maintainers.

Workflow audit

Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 15 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.