hexlet/phpstan-fp

Release historycaution

The package has eight releases since October 2020, but none in the last 12 months and the latest registry release was about 18 months ago. This indicates slower release maintenance, though repository activity provides some compensation.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence that the package is unsafe.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkouts, but both action references are unpinned, reducing build reproducibility and action-supply-chain hygiene.