sanmai/phpstan-rules

Maintainerscaution

Only one registry account has publish access, which creates a narrow publishing point. The repository's recent activity shows that this maintainer is active, but does not remove the single-person continuity risk.

Project backingcaution

The repository is owned by an individual account, so the single-contributor and single-publisher concentration is not offset by organization backing.

Release historycaution

The package has 17 releases over about 15 months, but only one release in the last 12 months. Recent repository activity partly offsets the slow registry cadence, but the release pattern warrants caution.

Repo bus factorcaution

All four recent commits came from one contributor, so maintenance and release continuity are concentrated in a single person.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap rather than evidence of unsafe code.