michaelcozzolino/psalm-html-report

Dependency profilecaution

The package has five runtime dependencies, including Psalm and Twig, which is reasonable for an HTML-report plugin but creates compatibility obligations as those projects evolve.

Release historycaution

Only two releases were published, with no releases in the last 12 months; the latest release is about two years old. This is a meaningful maintenance and compatibility concern for a Psalm plugin.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent repository push provides some compensation, but the current lack of development activity raises abandonment risk.

Security policycaution

The repository has no security policy. This is a transparency gap, although the small plugin scope and other repository safeguards partly reduce its practical importance.

Token permissionscaution

The sole workflow does not declare top-level token permissions. No write permissions were observed, but explicit least-privilege configuration would provide stronger CI safeguards.