muqsit/generator-phpstan-rules

Release historycaution

The package has 5 releases but none in the last 12 months; its latest release was about 20 months ago. This indicates a meaningful maintenance concern for a dependency, though the release history is not wholly absent.

Repo commit activitycaution

There were 0 commits and 0 active maintainers in the last 3 months, consistent with the roughly 20-month release gap. This materially raises the risk that compatibility fixes may not arrive.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a small PHPStan extension this is a modest transparency and maintenance gap, not evidence of unsafe behavior.

Security policycaution

The repository has no security policy. That leaves vulnerability reporting and response expectations undocumented, although the small scope limits the severity of this gap.

Workflow auditcaution

The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings or untrusted triggers. However, both of its 2 action references are unpinned, leaving avoidable dependency drift risk.