rector-laravel-custom-rules/rules

Release historycaution

This is the only release, published 381 days ago, with no releases in the last 12 months. That limited history makes long-term maintenance harder to establish.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. With only one release, there is little observed evidence of continuing maintenance.

Repo toolingcaution

Composer is used for builds, but no security scanning tool is configured. This is a modest transparency and maintenance gap rather than a severe risk.

Security policycaution

The repository has no security policy. For a small package this is a limited transparency gap, but it leaves no documented process for reporting or handling vulnerabilities.

Workflow auditcaution

The only workflow has read-only permissions and no detected dangerous sinks or audit findings, but both of its action references are unpinned. Unpinned actions weaken build reproducibility and supply-chain hygiene.