weirdan/doctrine-psalm-plugin

Release historycaution

The package has existed for 2,853 days with 39 releases, but only one release in the last 12 months. The release history shows maturity, while the recent cadence warrants caution.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the past three months. A release on the latest collection date partly offsets this, but the observed coding activity remains thin.

Repo issue activitycaution

There were no new or closed issues in the past month, although one pull request was merged and seven remain open. The limited recent activity is a mild maintenance concern.

Security policycaution

No repository security policy was found. This is a transparency gap, though the repository does use Dependabot and Psalm as compensating security tooling.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 11 action references are unpinned, creating a supply-chain hygiene concern.