thecodingmachine/phpstan-safe-rule

Repo bus factorcaution

One contributor made all recent commits, creating a narrow operational base. Organization backing partly compensates by providing a broader maintenance context.

Repo commit activitycaution

The repository had 3 commits in the last 3 months, showing current activity, though all activity came from a single active maintainer.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and hygiene gap rather than evidence of abandonment.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations undocumented for a package used in developer builds.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned, reducing build reproducibility.