inviqa/phpstan-magento1

Release historydanger

This is the package's only release, published more than seven years ago, with no releases in the last 12 months. That is a substantial maintenance and compatibility concern.

Repo commit activitydanger

The repository has had zero commits and zero active maintainers in the last three months, consistent with a project that has been inactive for years. No provided signal shows current maintenance capacity.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools are present. That weakens supply-chain hygiene without indicating that the package is unsafe by itself.

Repository archivedcaution

The repository is not archived, which preserves a path for maintenance, but its last push was more than six years ago. The non-archived status only partly offsets the inactivity evidence.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is less serious than the long maintenance pause.