canvural/larastan-strict-rules

Release historycaution

The package has been maintained since 2020 with 34 releases and a release in the last year, although only one release occurred in that period, indicating a slower current cadence.

Repo bus factorcaution

Two contributors are active, but one accounts for 80% of recent commits, leaving maintenance somewhat concentrated.

Security policycaution

The repository has no security policy, which is a transparency gap, although this small static-analysis rules package does use Dependabot.

Workflow auditcaution

Both workflows were analyzed without high-confidence audit findings or untrusted-trigger sinks, but all 18 action references are unpinned, reducing build reproducibility and supply-chain hygiene.