qubus/qubus-coding-standard

Dependency profilecaution

The 11 declared runtime dependencies are substantial, but they are relevant PHP coding-standard, analysis, testing, and installation-tool components for this package type. The profile still increases dependency surface somewhat.

Repo bus factorcaution

All recent commits came from one contributor, creating concentration risk. The organization-owned repository provides some handoff capacity, but no second recent contributor is shown.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months from 1 active maintainer, which is thin recent activity despite the strong release cadence.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tool was detected. For a small coding-standard package this is a modest transparency and maintenance gap, not a severe risk.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a minor transparency gap for a package whose primary role is development tooling.