eliashaeussler/phpstan-config

Project backingcaution

The registry namespace and repository owner match, but both are a single user account. This is consistent ownership, though it offers less continuity than organization backing.

Repo bus factorcaution

All two commits in the last 3 months came from one contributor, leaving maintenance dependent on a single person. The repository is user-owned rather than organization-backed, so there is no provided organizational handoff signal to compensate for this concentration.

Repo popularitycaution

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these low adoption indicators provide little external validation.

Repo toolingcaution

Composer is used as a build tool, but no security scanning tools were detected. This is a modest transparency and supply-chain hygiene gap, not evidence that the package is unsafe.

Security policycaution

No repository security policy was found, reducing the documented path for reporting vulnerabilities. This is a documentation gap for a small configuration package rather than a severe risk.