shredio/phpstan-helpers

Package scaffoldingcaution

The source repository has tests and uses GitHub Releases, providing useful project evidence. The published artifact has no README, which is a minor consumer-documentation gap for a library.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months; combined with the latest release being about seven months ago, this raises maintenance and abandonment concern.

Repo toolingcaution

Composer is used for the build, but no security-scanning tooling was detected, leaving repository-level security hygiene less transparent.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.

Workflow auditcaution

Both workflows were analyzed successfully with no dangerous triggers or audit findings, but all four action references are unpinned, reducing build reproducibility and update control.