sidz/phpstan-rules

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. The same-day release and push provide some compensating evidence, but the recent development activity is still thin.

Repo toolingcaution

The repository uses Composer and Make, but no security scanning tool was detected. This is a modest process gap rather than evidence of abandonment.

Security policycaution

No repository security policy was found. For a small static-analysis rules package this limits vulnerability-reporting transparency but does not by itself make the release unfit.

Workflow auditcaution

All three workflows were analyzed successfully, with no untrusted checkout, script injection, or audit findings. However, all eight action references are unpinned, leaving workflow dependencies exposed to upstream changes.