wayofdev/cs-fixer-config

Release historycaution

The package has 97 releases, but none in the last 12 months and the latest release was over two years ago. This materially raises maintenance and abandonment concerns despite the historically frequent release cadence.

Repo commit activitycaution

No commits were recorded in the last three months and no maintainers were active during that period. This weakens confidence in ongoing maintenance, although the recent repository push provides some compensation.

Workflow auditcaution

The audit covered all 10 workflows with no detected sinks or high-confidence findings, but all 69 action references are unpinned and one workflow grants top-level write permission. The unpinned dependencies reduce build reproducibility; the permission scope is a smaller concern without an untrusted trigger or sink.