kubawerlos/php-cs-fixer-custom-fixers

Repo bus factorcaution

One contributor made all 15 commits in the last three months, giving the project a concentrated maintenance dependency and limited handoff resilience.

Repo commit activitycaution

There were 15 commits in the last three months, so maintenance is active, but all recent commits came from one maintainer.

Security policycaution

The repository has no published security policy. This is a transparency gap for reporting and handling security issues, though it does not outweigh the strong release and activity history.

Workflow auditcaution

Both workflows were fully audited with no reported findings or untrusted checkouts, but all 10 action references are unpinned and one workflow grants top-level write permissions. These are workflow hygiene weaknesses without a detected untrusted trigger or sink.