mediawiki/phan-taint-check-plugin

Repo bus factorcaution

All 3 recent commits came from one contributor, so recent maintenance is concentrated; Wikimedia organizational backing partly compensates but does not remove the continuity risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected. For a security-focused plugin, that is a modest transparency and maintenance gap.

Security policycaution

The repository has no published security policy. This weakens the documented process for reporting and handling vulnerabilities, particularly for a security-analysis tool.