ikvasnica/phpstan-clean-test

Release historydanger

The package has six releases since January 2020, but none in the last three years; this is meaningful evidence of stalled maintenance for a dependency.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating limited current maintenance capacity.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; for a small static-analysis extension this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All four workflows were analyzed without high-severity findings or untrusted checkouts, but all 15 action references are unpinned. The absence of a top-level permissions block is acceptable on its own, so the unpinned references are the material concern.