phootwork/php-cs-fixer-config

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The latest push coincided with the release, but the absence of follow-up activity lowers confidence in ongoing maintenance.

Repo popularitycaution

The repository has three stars and two forks. This is limited external adoption and provides little supporting evidence, but popularity is not required for a small stable package.

Repo toolingcaution

Composer is used as the build tool, but no security scanning tools were detected. For a small configuration package this is a hygiene gap rather than evidence of unfitness.

Security policycaution

The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not by itself evidence of an unsafe release.

Workflow auditcaution

The single workflow was fully analyzed with no reported audit findings or untrusted checkouts, but all three action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions leave avoidable supply-chain hygiene risk.