cpsit/php-cs-fixer-config

Repo bus factorcaution

One contributor made 100% of the 2 recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving maintenance concentrated.

Repo commit activitycaution

Only 2 commits were recorded in the last 3 months, so direct development activity is modest. Recent release and pull-request activity provide some compensation, but not enough to make the cadence fully reassuring.

Security policycaution

No SECURITY.md or equivalent security policy was found. This is a transparency gap for reporting and handling vulnerabilities, although it does not by itself show unsafe code.

Workflow auditcaution

All 3 workflows were analyzed successfully; all 15 action references are pinned and no untrusted checkout or script-injection paths were found. However, the high-confidence template-injection finding in release.yaml is a workflow hygiene concern.