gskema/phpcs-type-sniff

The repository has tests, a changelog, a matching project, and a clear MIT license. Recent commit activity is absent and its two workflow actions are unpinned, while the package has had no release for over two years.

Latest 83.0.0

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 62 releases since May 2019, but none in the last 12 months and the latest release was over two years ago. This materially raises staleness risk despite its historically frequent release cadence.

Repo commit activity

There were no commits and no active maintainers in the last three months. The repository was pushed in September 2025, but the current lack of activity still leaves maintenance momentum uncertain.

Repo tooling

Composer is used as a build tool, showing basic project tooling, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than a severe risk.

Security policy

The repository has no security policy, making vulnerability reporting less clear for consumers. This is a minor transparency gap, not evidence of unsafe code.

Workflow audit

The single workflow was fully analyzed with no untrusted checkout, injection, or high-severity findings. However, both action references are unpinned, so their dependencies can change unexpectedly.