meyfa/phpunit-assert-gd

Release historycaution

The package has 15 releases since February 2018, but none in the last 12 months; its latest release was published in July 2025, indicating a prolonged release pause.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the July 2025 release shows it was maintained recently.

Repo toolingcaution

Composer is used for the build, but no security scanning tools were detected. For a small PHPUnit testing library this is a transparency and hygiene gap, not a severe risk by itself.

Security policycaution

The repository has no security policy. This weakens disclosure transparency, though the package is a focused development-time testing library and other project evidence partly offsets the gap.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving workflow dependencies exposed to upstream changes.