esfahanahan/phpstan-rules

Release historycaution

The package was first released less than a day ago and has only three releases, so there is not yet enough history to demonstrate sustained maintenance.

Repo commit activitycaution

There were no commits and no active maintainers in the measured three-month window. Because the project is less than a day old, this mainly reflects limited history, but it still leaves maintenance capacity unproven.

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.

Security policycaution

The repository has no security policy. This is a transparency gap, though the small and very new project provides limited history in which such a policy would normally be used.

Workflow auditcaution

All three workflows were analyzed with no dangerous sinks or audit findings, but all eight action references are unpinned and two workflows grant top-level write permissions. These are workflow hygiene and least-privilege concerns, not severe risks on their own.