gosuperscript/phpstan-rules

Release historycaution

The package is 180 days old with three releases, including three in the last 12 months and a median interval of about 38 days. This shows an emerging but reasonably regular release pattern, though its short history limits maturity evidence.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers during the last three months. For a package only 180 days old, that is a meaningful maintenance warning despite the recent release timestamp.

Security policycaution

No repository security policy was found. This is a transparency and vulnerability-reporting gap, although it is not by itself evidence that the package is unsafe.

Version stabilitycaution

Version v0.1.2 is not from a stable major version, so its API and behavior may still change. It is not marked as a prerelease, which partly offsets the risk.

Workflow auditcaution

Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, and neither grants top-level write access. However, all 6 of 6 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.