wpsyntex/polylang-phpstan

Repo bus factorcaution

One contributor made all commits in the last 3 months, concentrating recent activity in a single person. Organization ownership provides some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating limited recent development activity. Recent releases and the non-archived repository partly offset this, but the activity is still a maintenance caution.

Repo toolingcaution

Composer build tooling is present, but no security scanning tooling was detected. The missing scanning is a modest transparency and hygiene gap.

Security policycaution

The repository has no security policy. For a small development-time analysis extension this is a minor transparency gap, not evidence of abandonment.

Workflow auditcaution

The sole workflow was fully analyzed with no injection or high-confidence audit findings, and it does not grant top-level write permissions. All 3 referenced actions are unpinned, which is a workflow hygiene caution.