phpro/agent-rules

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern for a young package, despite the recent release history.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. For a young dependency, this leaves a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy. This makes vulnerability reporting and response expectations less clear, though it is not evidence of an active vulnerability.

Version stabilitycaution

Version 0.4.0 is not a prerelease, although the package has not reached a stable major version. The lack of recent prereleases is a compensating sign for current release stability.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all three action references are unpinned, leaving the build exposed to upstream action changes.