tiagohillebrandt/phpcs-diff

Release historycaution

The package has only two releases and none in the last 12 months; its latest release was over a year ago, indicating a slow release cadence.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months, a meaningful sign of currently inactive maintenance.

Repo toolingcaution

Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.

Security policycaution

The repository has no security policy, so users have no documented security reporting path; this is a minor transparency concern.

Workflow auditcaution

The sole workflow has a high-confidence template-injection finding and both action references are unpinned. It has no untrusted checkout or dangerous trigger, so these are workflow hygiene concerns rather than a severe standalone risk.