phpyh/coding-standard

Release historycaution

The package has 14 releases over about 3.6 years and one release in the last 12 months, but the recent cadence is sparse enough to raise a maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months, indicating currently quiet development; the recent release provides only partial compensation.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability-reporting expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous trigger or untrusted checkout, but it has one high-confidence medium-severity secrets-inherit finding and its only action use is unpinned. The missing top-level permissions block is not a concern on its own.