pmjones/php-styler

Project backingcaution

The package and repository are owned by the same individual account, so the concentrated contributor activity is not offset by visible organizational backing.

Repo bus factorcaution

One contributor made all 5 commits in the last 3 months, leaving no demonstrated backup for maintenance if that contributor becomes unavailable.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected; this is a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so vulnerability reporting and response expectations are not documented.

Workflow auditcaution

The single workflow was fully analyzed with no high-confidence audit findings or untrusted execution sinks, but all 3 action references are unpinned, weakening build reproducibility.