phalcon/ide-stubs

Repo bus factorcaution

All recent commit activity came from one contributor, creating concentration risk; organization backing provides some capacity for handoff but does not remove the recent single-contributor pattern.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent implementation activity despite the current release and recent merged pull requests.

Repo toolingcaution

Composer is used for the build, but no security-scanning tools were detected. For this package, the established build tool is positive while the missing scanning coverage is a minor transparency gap.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkouts, script injections, or audit findings. However, all 3 action references are unpinned, leaving avoidable supply-chain reproducibility risk.