broadway/coding-standard

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on the package.

Repository archiveddanger

The linked repository is archived, which indicates the project is no longer intended for normal ongoing maintenance. A recent push does not compensate for the repository's archived status.

Repo bus factorcaution

All 4 recent commits came from one contributor. Organization backing provides some handoff capacity, but the observed maintenance activity remains concentrated.

Security policycaution

No repository security policy was found. For a small coding-standard package this is a minor transparency gap, but it adds little weight compared with the abandonment signals.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which is a minor reproducibility and supply-chain hygiene gap.