signpostmarv/php-cs-fixer-config

Maintainerscaution

One registry account has publish access. The linked project is user-owned rather than organization-backed, so there is limited visible publishing redundancy, although this does not prove the project is abandoned.

Release historycaution

The package has 41 releases since May 2017, but none in the last 12 months; its latest release was in January 2024, about 2 years and 8 months ago. This materially raises maintenance risk despite the historically regular release pattern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with the long release gap. That weakens evidence of ongoing maintenance.

Security policycaution

The repository has no security policy, leaving no stated process for reporting or handling vulnerabilities. This is a transparency gap, but it is less severe for a small development-only configuration package.