dxw/php-cs-fixer-config

Release historycaution

The package has made no release in nearly three years, with only five releases overall and none in the last 12 months. This is the main maintenance concern, although the linked repository was pushed recently.

Security policycaution

The repository has no published security policy. This is a transparency gap, though the available security scanning provides some compensating evidence.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving avoidable automation reproducibility risk.