soyhuce/empty-collection

Release historydanger

This is the only release, published in March 2022, with no releases in the following 12 months of observed history. That long period without a newer release raises abandonment and compatibility risk.

Repo commit activitydanger

The repository recorded no commits and no active maintainers in the last three months, consistent with the package having received no updates since its initial release. This materially lowers confidence in ongoing maintenance.

Security policycaution

The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, though it is less significant for a small PHPStan integration package.

Version stabilitycaution

Version 0.1.0 is not a stable major release, so its API and compatibility expectations are less mature. The available tests, documentation, and release notes partly offset this concern.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure without evidence of an active workflow threat.