bonami/phpstan-collections

Release historycaution

The package has 11 releases since December 2020, but none in the last 12 months and the latest release was in March 2025. This is a meaningful maintenance concern despite its previously regular release spacing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long gap since the latest release. This increases the risk that compatibility issues will remain unresolved.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while one issue and three pull requests remain open. The low volume is not severe alone, but it provides no evidence of recent project activity.

Security policycaution

The repository has no security policy. This is a transparency gap, although the small package scope and other repository evidence partly reduce its practical weight.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 9 action references are unpinned. The missing top-level permissions block is acceptable on its own; unpinned actions remain a supply-chain hygiene gap.