mformono/phpstan-pack

Release historydanger

This package has only one release, published about 15 months ago, with no releases in the last 12 months. That leaves little evidence of sustained maintenance.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Its non-archived status is a limited positive, but does not offset the lack of observed activity.

Package scaffoldingcaution

The artifact has no README, tests, or changelog. Missing tests and changelog are normal for published artifacts, but the missing README reduces consumer transparency for a package intended to configure PHPStan extensions.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous findings, no untrusted checkouts, and no script injection, but its one action reference is unpinned. The absence of a top-level permissions block is acceptable on its own.