type-lang/phpdoc

Repo bus factorcaution

All 27 recent commits came from one contributor, creating a concentrated maintenance dependency despite the repository being organization-owned.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.

Security policycaution

The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.

Version stabilitycaution

This release is a beta, and 84.6% of recent releases are prereleases, so consumers should expect less stability than from a mature stable line.

Workflow auditcaution

The workflow audit completed cleanly with no reported findings or untrusted-code sinks, but all 3 action references are unpinned, weakening build reproducibility and action provenance.