verdet/guzzle-mock

Release historydanger

This is the package's only release, published over four years ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last three months, reinforcing the long period since the only release. This is a meaningful abandonment concern, though the repository is not archived.

Security policycaution

The repository has no security policy. This is a transparency gap, but it is less severe for a small testing utility than for a package handling sensitive production data.

Workflow auditcaution

Both workflows use read-only permissions and the audit found no dangerous triggers, untrusted checkouts, script injection, or other findings. However, all 13 action references are unpinned, leaving a mild workflow supply-chain hygiene gap.