spaze/phpstan-stripe

Release historycaution

The package has 19 releases since October 2018, but none in the last 12 months and its latest registry release was about 22 months ago. This indicates a meaningful maintenance slowdown, although the long history provides some maturity.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This is a direct sign of currently limited maintenance activity, though the repository was recently pushed and the release history is established.

Security policycaution

No repository security policy was found. This is a transparency gap, but it is smaller than the maintenance concerns and does not by itself make the package unfit.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both analyzed action references are unpinned, leaving a modest reproducibility and supply-chain hygiene gap.