invisnet/phpstan-compose-shapes

Project backingcaution

The registry namespace and repository owner match, and the project is owned by a user account rather than an organization. That is consistent ownership but offers limited backing capacity.

Release historycaution

This package has one release and is less than a day old, so there is not yet enough release history to demonstrate sustained maintenance. Its repository and release documentation provide some compensating transparency.

Repo commit activitycaution

There were no commits or active maintainers in the preceding three months. Because the repository is brand new, this is limited evidence of abandonment, but it leaves ongoing maintenance unproven.

Repo toolingcaution

The repository uses Composer build tooling, but no security scanning tools were detected. For a small PHPStan extension this is a modest hygiene gap rather than a severe risk.

Security policycaution

No security policy is present in the repository, reducing transparency for vulnerability reporting. The package's small scope and documented source partially limit the practical impact.