voku/phpstan-rules

Release historycaution

The package has 41 releases over roughly four and a half years, but only one release in the last 12 months. Strong recent repository activity partly compensates for the slower release cadence.

Repo bus factorcaution

One contributor made about 89% of the 71 recent commits, creating meaningful concentration risk. A second active contributor provides partial redundancy, so this is a caution rather than a severe abandonment signal.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all four action references are unpinned, which is a supply-chain hygiene gap.