shopwarelabs/phpstan-shopware

Repo bus factorcaution

Two contributors were active, but one made 16 of 17 recent commits, creating a concentrated maintenance dependency; organization backing provides some handoff capacity but does not remove the concentration risk.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tools were detected, leaving a repository security-hygiene gap.

Security policycaution

No repository security policy was found, reducing transparency around vulnerability reporting and response procedures.

Token permissionscaution

The only workflow lacks a top-level permissions declaration; although no top-level write permissions were detected, explicit least-privilege configuration would provide stronger assurance.

Version stabilitycaution

Version 0.2.4 is not a stable-major release, so compatibility expectations are lower than for a 1.x package; however, it is not a prerelease and recent prerelease share is 0%.