justcoded/php-cs-fixer

Release historycaution

The package has only three releases, with none in the last 12 months; the latest release was over a year ago. This is meaningful evidence of slowing maintenance for a code-quality tool.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and raising abandonment risk.

Repo popularitycaution

The repository has only 2 stars and no forks, providing little evidence of broad community use or external review. Popularity is supporting evidence, so this modestly lowers confidence rather than deciding the assessment.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small package this is a maintenance and transparency gap, not evidence of maliciousness.

Security policycaution

The repository has no security policy. This limits the project's documented vulnerability-reporting process, although it is a hygiene concern rather than a standalone dependency blocker.