nette/phpstan-rules

Repo bus factorcaution

All 19 recent commits came from one contributor, creating concentration risk; the organization-owned repository provides some compensation because maintenance can potentially be handed off internally.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap without outweighing the repository's active maintenance and CI evidence.

Token permissionscaution

All three workflows lack top-level token permission declarations, so their default GitHub Actions token access is not explicitly minimized.