sirbrillig/phpcs-changed

Repo bus factorcaution

The top contributor made 10 of 12 recent commits, so maintenance is concentrated even though two additional contributors were active.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency gap rather than a release blocker.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 5 workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 18 action references are unpinned, which weakens build reproducibility, while the absence of top-level permissions is acceptable on its own.