apermo/phpstan-wordpress-rules

Project backingcaution

The registry namespace and repository are owned by the same user account, which supports package identity but does not provide the maintenance redundancy of organization ownership.

Repo bus factorcaution

One contributor made all commits in the last three months, concentrating maintenance responsibility entirely in a single person. The repository owner is a user account, so no organization backing is shown to offset that concentration.

Repo commit activitycaution

Only two commits were made in the last three months, showing limited recent activity even though a release was published during that period.

Repo toolingcaution

Composer is used for the build, but no repository security-scanning tool was detected. This is a modest transparency and assurance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving no documented path for reporting vulnerabilities or explaining security response expectations.