gomzyakov/php-code-style

Registry deprecationdanger

Packagist marks the package abandoned and provides gomzyakov/code-style as a replacement. This is a direct release-selection risk even though the repository remains active.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This weakens confidence in ongoing maintenance, although the recent release history provides some counterweight.

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package. That weakens confidence that the linked repository is the exact package source rather than a renamed or shared project.

Security policycaution

The repository has no security policy. For a small developer-tool package this is a transparency gap, though Dependabot-based scanning provides some compensating security practice.

Workflow auditcaution

All three workflows were analyzed without high-confidence findings or dangerous triggers, but all six action references are unpinned. That leaves avoidable build-integrity and reproducibility exposure.