codeigniter/phpstan-codeigniter

Lifecycle scriptscaution

The package defines a post-update-cmd script, creating some update-time execution surface; the available workflow and repository evidence do not indicate additional misuse.

Repo bus factorcaution

All 39 recent commits came from one contributor, concentrating maintenance responsibility and increasing handoff risk despite the active repository.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear; its dependency scanning provides only partial compensation.