cakedc/cakephp-phpstan

Name lookalikedanger

The package resembles cakephp/cakephp, which has far more downloads and stable releases; borrows_lookalike_identity is true, while the low artifact overlap does not outweigh that identity signal.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of slowed maintenance for a package that released recently.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a repository hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings; however, all six action references are unpinned, weakening build reproducibility.