yireo/magento2-test-generator

Release historycaution

The package has four releases over about two years, with a median interval of about seven months and one release in the last 12 months. This indicates a modest rather than rapid maintenance cadence.

Repo bus factorcaution

One contributor made all five recent commits, creating a meaningful maintenance concentration risk. Organization ownership provides some handoff capacity but does not remove the current single-contributor dependency.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Version stabilitycaution

Version 0.0.5 is not a stable major release, so compatibility expectations are lower even though it is not marked as a prerelease.

Workflow auditcaution

All five workflows were analyzed with no untrusted checkout or script-injection paths, but all six action references are unpinned and four high-confidence findings identify unpinned or floating container images. This weakens build reproducibility and supply-chain hygiene.