markhuot/craft-pest-core

Dependency profilecaution

The package declares 11 runtime dependencies, including framework, testing, and Composer components. This is a meaningful dependency surface but is consistent with a Craft CMS testing integration.

Project backingcaution

The package and repository are owned by the same individual account. This is coherent ownership, but it provides less organizational redundancy than a backed project with multiple maintainers.

Repo commit activitycaution

The repository recorded no commits and no active maintainers in the last 3 months. The current release and longer release history provide some compensation, but this still raises near-term maintenance risk.

Repo toolingcaution

Composer is used for builds, but no security scanning tools were detected. This is a transparency and maintenance gap rather than evidence that the package is unsafe.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.