wp-media/phpunit

Licensecaution

The manifest declares GPL-2.0+, while the repository license was detected as GPL-2.0; this licensing mismatch deserves clarification, although both indicate an explicitly licensed project.

Security policycaution

No repository security policy was found, which is a transparency gap, though the project does use Dependabot for security scanning.

Workflow auditcaution

All four workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection; however, six of eight action references are unpinned, creating a modest reproducibility and supply-chain hygiene concern.