Package Health/staabm/phpstan-baseline-analysis

staabm/phpstan-baseline-analysis

Clear documentation, repository tests, licensing, and a small dependency set make integration straightforward. Recent activity is absent, and every workflow action reference is unpinned, so maintenance and build reproducibility need attention.

Latest 0.13.2

Packagist

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package is maintained under a user-owned repository rather than an organization account. This is not inherently unhealthy, but it provides less organizational continuity than an organization-backed project.

Release history

The package has 36 releases over roughly five years, but only one release in the last 12 months; this indicates a meaningful slowdown compared with its earlier median interval of about 14 days.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. The repository was pushed recently and has an established release history, but the current lack of development activity is still a maintenance concern.

Security policy

No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

All three workflows were analyzed successfully with no untrusted checkouts, script injection, or high-confidence audit findings. However, all eight action references are unpinned, which weakens build reproducibility and action supply-chain control.