sidz/phpstan-cakephp2

Release historycaution

The package has had no registry release in about 20 months, despite seven releases overall; this suggests maintenance has slowed materially.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months, a meaningful sign of currently low maintenance activity.

Repo toolingcaution

Composer build tooling is present, but the repository reports no security scanning tools, leaving a modest transparency and maintenance gap.

Security policycaution

No repository security policy is published. This is a transparency gap, though it is less significant for a small static-analysis extension than for a service or credential-handling package.

Workflow auditcaution

The single workflow was fully analyzed and uses read-only permissions with no reported dangerous findings, but both action references are unpinned, weakening build reproducibility.