villfa/phpunit-extra-constraints

Release historycaution

The package has had only three releases, with the latest in November 2020 and none in the last 12 months. That is a meaningful maintenance concern for a dependency, although the small, focused scope may reduce the need for frequent releases.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, consistent with a project that has effectively stalled. The repository remains available, but this provides little evidence of ongoing maintenance.

Security policycaution

The repository has no security policy. For a small testing-constraint library this is a transparency gap, but it is less serious than the maintenance concerns and is partly offset by the repository's security scanning tooling.

Workflow auditcaution

All seven analyzed action references are unpinned, and the audit found high-confidence template-injection patterns plus an archived action. No dangerous trigger or untrusted checkout was reported, so these are workflow hygiene concerns rather than a severe release risk.