thecodingmachine/phpstan-strict-rules

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected; this is a minor transparency gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, which makes vulnerability reporting less explicit, though this is a limited hygiene concern for a small static-analysis rules package.

Workflow auditcaution

The single workflow was fully audited with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, creating a modest reproducibility and action-supply-chain gap.